2026-03-25 22:03:46.343469 | Job console starting 2026-03-25 22:03:46.426023 | Updating git repos 2026-03-25 22:03:46.483004 | Cloning repos into workspace 2026-03-25 22:03:46.546578 | Restoring repo states 2026-03-25 22:03:46.562201 | Merging changes 2026-03-25 22:03:47.071918 | Checking out repos 2026-03-25 22:03:47.145774 | Preparing playbooks 2026-03-25 22:03:47.785264 | Running Ansible setup 2026-03-25 22:03:55.027201 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-03-25 22:03:55.851616 | 2026-03-25 22:03:55.851796 | PLAY [Base pre] 2026-03-25 22:03:55.869352 | 2026-03-25 22:03:55.869507 | TASK [Setup log path fact] 2026-03-25 22:03:55.897980 | centos-9-stream | ok 2026-03-25 22:03:55.911288 | 2026-03-25 22:03:55.911434 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-03-25 22:03:55.952136 | centos-9-stream | ok 2026-03-25 22:03:55.962648 | 2026-03-25 22:03:55.962784 | TASK [emit-job-header : Print job information] 2026-03-25 22:03:56.008894 | # Job Information 2026-03-25 22:03:56.009257 | Ansible Version: 2.16.14 2026-03-25 22:03:56.009331 | Job: ansible-collection-services-molecule-auditd 2026-03-25 22:03:56.009400 | Pipeline: check 2026-03-25 22:03:56.009449 | Executor: 521e9411259a 2026-03-25 22:03:56.009492 | Triggered by: https://github.com/osism/ansible-collection-services/pull/1994 2026-03-25 22:03:56.009533 | Event ID: 764c8dd0-2896-11f1-836c-0f3d1bf8f434 2026-03-25 22:03:56.016188 | 2026-03-25 22:03:56.016345 | LOOP [emit-job-header : Print node information] 2026-03-25 22:03:56.128713 | centos-9-stream | ok: 2026-03-25 22:03:56.129122 | centos-9-stream | # Node Information 2026-03-25 22:03:56.129190 | centos-9-stream | Inventory Hostname: centos-9-stream 2026-03-25 22:03:56.129233 | centos-9-stream | Hostname: np0000249228 2026-03-25 22:03:56.129271 | centos-9-stream | Username: zuul 2026-03-25 22:03:56.129307 | centos-9-stream | Distro: CentOS 9 2026-03-25 22:03:56.129360 | centos-9-stream | Provider: regiocloud-a 2026-03-25 22:03:56.129404 | centos-9-stream | Region: 2026-03-25 22:03:56.129440 | centos-9-stream | Label: centos-9-stream 2026-03-25 22:03:56.129474 | centos-9-stream | Product Name: OpenStack Nova 2026-03-25 22:03:56.129507 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fea8:2c24 2026-03-25 22:03:56.176914 | centos-9-stream | ok: 2026-03-25 22:03:56.177195 | centos-9-stream | # Node Information 2026-03-25 22:03:56.177274 | centos-9-stream | Inventory Hostname: debian-bookworm 2026-03-25 22:03:56.177324 | centos-9-stream | Hostname: debian 2026-03-25 22:03:56.177374 | centos-9-stream | Username: zuul 2026-03-25 22:03:56.177417 | centos-9-stream | Distro: Debian 12.13 2026-03-25 22:03:56.177458 | centos-9-stream | Provider: regiocloud-a 2026-03-25 22:03:56.177497 | centos-9-stream | Region: 2026-03-25 22:03:56.177537 | centos-9-stream | Label: debian-bookworm 2026-03-25 22:03:56.177575 | centos-9-stream | Product Name: OpenStack Nova 2026-03-25 22:03:56.177633 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe0b:35cd 2026-03-25 22:03:56.226807 | centos-9-stream | ok: 2026-03-25 22:03:56.227010 | centos-9-stream | # Node Information 2026-03-25 22:03:56.227068 | centos-9-stream | Inventory Hostname: ubuntu-jammy 2026-03-25 22:03:56.227108 | centos-9-stream | Hostname: ubuntu 2026-03-25 22:03:56.227146 | centos-9-stream | Username: zuul 2026-03-25 22:03:56.227183 | centos-9-stream | Distro: Ubuntu 22.04 2026-03-25 22:03:56.227217 | centos-9-stream | Provider: regiocloud-a 2026-03-25 22:03:56.227252 | centos-9-stream | Region: 2026-03-25 22:03:56.227287 | centos-9-stream | Label: ubuntu-jammy 2026-03-25 22:03:56.227320 | centos-9-stream | Product Name: OpenStack Nova 2026-03-25 22:03:56.227352 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fef3:4b53 2026-03-25 22:03:56.277983 | centos-9-stream | ok: 2026-03-25 22:03:56.278148 | centos-9-stream | # Node Information 2026-03-25 22:03:56.278211 | centos-9-stream | Inventory Hostname: ubuntu-noble 2026-03-25 22:03:56.278259 | centos-9-stream | Hostname: ubuntu 2026-03-25 22:03:56.278325 | centos-9-stream | Username: zuul 2026-03-25 22:03:56.278380 | centos-9-stream | Distro: Ubuntu 24.04 2026-03-25 22:03:56.278421 | centos-9-stream | Provider: regiocloud-a 2026-03-25 22:03:56.278464 | centos-9-stream | Region: 2026-03-25 22:03:56.278506 | centos-9-stream | Label: ubuntu-noble 2026-03-25 22:03:56.278545 | centos-9-stream | Product Name: OpenStack Nova 2026-03-25 22:03:56.278633 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe65:ef3e 2026-03-25 22:03:56.300697 | 2026-03-25 22:03:56.300824 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-03-25 22:03:56.786151 | centos-9-stream -> localhost | changed 2026-03-25 22:03:56.799116 | 2026-03-25 22:03:56.799276 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-03-25 22:03:58.451237 | ubuntu-jammy -> localhost | ok 2026-03-25 22:03:58.453674 | debian-bookworm -> localhost | changed 2026-03-25 22:03:58.454543 | centos-9-stream -> localhost | ok 2026-03-25 22:03:58.455303 | ubuntu-noble -> localhost | ok 2026-03-25 22:03:58.478212 | 2026-03-25 22:03:58.478352 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-03-25 22:03:58.837336 | centos-9-stream -> localhost | ok 2026-03-25 22:03:58.847332 | 2026-03-25 22:03:58.847471 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-03-25 22:03:58.870639 | centos-9-stream | ok 2026-03-25 22:03:58.886921 | debian-bookworm | ok 2026-03-25 22:03:58.903271 | ubuntu-jammy | ok 2026-03-25 22:03:58.918235 | ubuntu-noble | ok 2026-03-25 22:03:58.948046 | centos-9-stream | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-03-25 22:03:58.948152 | debian-bookworm | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-03-25 22:03:58.948181 | ubuntu-jammy | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-03-25 22:03:58.948204 | ubuntu-noble | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-03-25 22:03:58.954822 | 2026-03-25 22:03:58.955032 | TASK [add-build-sshkey : Create Temp SSH key] 2026-03-25 22:04:00.144328 | centos-9-stream -> localhost | Generating public/private rsa key pair. 2026-03-25 22:04:00.144556 | centos-9-stream -> localhost | Your identification has been saved in /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/work/87403c918a82407cbbb86afd37f43cd4_id_rsa 2026-03-25 22:04:00.144594 | centos-9-stream -> localhost | Your public key has been saved in /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/work/87403c918a82407cbbb86afd37f43cd4_id_rsa.pub 2026-03-25 22:04:00.144620 | centos-9-stream -> localhost | The key fingerprint is: 2026-03-25 22:04:00.144643 | centos-9-stream -> localhost | SHA256:SWI8YCAlPtNCNX89QkbEZfSVd9G0KtrTRn5huqkuN/o zuul-build-sshkey 2026-03-25 22:04:00.144665 | centos-9-stream -> localhost | The key's randomart image is: 2026-03-25 22:04:00.144686 | centos-9-stream -> localhost | +---[RSA 3072]----+ 2026-03-25 22:04:00.144707 | centos-9-stream -> localhost | |oo++o +=o+ ..o+| 2026-03-25 22:04:00.144728 | centos-9-stream -> localhost | |oo..ooo.o . .. .+| 2026-03-25 22:04:00.144748 | centos-9-stream -> localhost | | = . .=o.o . ...| 2026-03-25 22:04:00.144767 | centos-9-stream -> localhost | | + ..+... . | 2026-03-25 22:04:00.144786 | centos-9-stream -> localhost | | S . o o | 2026-03-25 22:04:00.144804 | centos-9-stream -> localhost | | o = o .| 2026-03-25 22:04:00.144823 | centos-9-stream -> localhost | | . o = . | 2026-03-25 22:04:00.144841 | centos-9-stream -> localhost | | . oo + | 2026-03-25 22:04:00.144879 | centos-9-stream -> localhost | | .*Eoo | 2026-03-25 22:04:00.144899 | centos-9-stream -> localhost | +----[SHA256]-----+ 2026-03-25 22:04:00.144969 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.712150 2026-03-25 22:04:00.150650 | 2026-03-25 22:04:00.150758 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-03-25 22:04:00.188779 | centos-9-stream | ok 2026-03-25 22:04:00.210663 | debian-bookworm | ok 2026-03-25 22:04:00.215894 | ubuntu-jammy | ok 2026-03-25 22:04:00.220200 | ubuntu-noble | ok 2026-03-25 22:04:00.242584 | centos-9-stream | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-03-25 22:04:00.242666 | debian-bookworm | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-03-25 22:04:00.242695 | ubuntu-jammy | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-03-25 22:04:00.242716 | ubuntu-noble | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-03-25 22:04:00.258896 | 2026-03-25 22:04:00.259027 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-03-25 22:04:00.287029 | centos-9-stream | skipping: Conditional result was False 2026-03-25 22:04:00.304216 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:00.306367 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:00.317082 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:00.326394 | 2026-03-25 22:04:00.326570 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-03-25 22:04:00.944178 | ubuntu-jammy | changed 2026-03-25 22:04:00.952847 | debian-bookworm | changed 2026-03-25 22:04:00.961375 | centos-9-stream | changed 2026-03-25 22:04:01.017337 | ubuntu-noble | changed 2026-03-25 22:04:01.021979 | 2026-03-25 22:04:01.022089 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-03-25 22:04:01.286672 | debian-bookworm | ok 2026-03-25 22:04:01.302337 | ubuntu-jammy | ok 2026-03-25 22:04:01.326643 | centos-9-stream | ok 2026-03-25 22:04:01.370307 | ubuntu-noble | ok 2026-03-25 22:04:01.379283 | 2026-03-25 22:04:01.379465 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-03-25 22:04:01.992219 | debian-bookworm | changed 2026-03-25 22:04:01.997985 | ubuntu-jammy | changed 2026-03-25 22:04:02.151699 | ubuntu-noble | changed 2026-03-25 22:04:02.392677 | centos-9-stream | changed 2026-03-25 22:04:02.398120 | 2026-03-25 22:04:02.398239 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-03-25 22:04:03.032382 | ubuntu-jammy | changed 2026-03-25 22:04:03.042733 | debian-bookworm | changed 2026-03-25 22:04:03.221774 | ubuntu-noble | changed 2026-03-25 22:04:03.411545 | centos-9-stream | changed 2026-03-25 22:04:03.419165 | 2026-03-25 22:04:03.419315 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-03-25 22:04:03.450337 | centos-9-stream | skipping: Conditional result was False 2026-03-25 22:04:03.463466 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:03.464614 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:03.475051 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:03.480641 | 2026-03-25 22:04:03.480749 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-03-25 22:04:03.896361 | centos-9-stream -> localhost | changed 2026-03-25 22:04:03.929511 | 2026-03-25 22:04:03.929656 | TASK [add-build-sshkey : Add back temp key] 2026-03-25 22:04:04.299922 | centos-9-stream -> localhost | Identity added: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/work/87403c918a82407cbbb86afd37f43cd4_id_rsa (zuul-build-sshkey) 2026-03-25 22:04:04.300538 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.019313 2026-03-25 22:04:04.312564 | 2026-03-25 22:04:04.312722 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-03-25 22:04:04.723939 | debian-bookworm | ok 2026-03-25 22:04:04.730646 | ubuntu-jammy | ok 2026-03-25 22:04:04.778803 | ubuntu-noble | ok 2026-03-25 22:04:04.784645 | centos-9-stream | ok 2026-03-25 22:04:04.789775 | 2026-03-25 22:04:04.789885 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-03-25 22:04:04.819964 | centos-9-stream | skipping: Conditional result was False 2026-03-25 22:04:04.832363 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:04.834741 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:04.845208 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:04.866669 | 2026-03-25 22:04:04.866812 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-03-25 22:04:05.345230 | debian-bookworm | ok 2026-03-25 22:04:05.351014 | ubuntu-jammy | ok 2026-03-25 22:04:05.388106 | ubuntu-noble | ok 2026-03-25 22:04:05.391816 | centos-9-stream | ok 2026-03-25 22:04:05.413625 | 2026-03-25 22:04:05.413752 | TASK [validate-host : Define zuul_info_dir fact] 2026-03-25 22:04:05.481077 | debian-bookworm | ok 2026-03-25 22:04:05.485169 | centos-9-stream | ok 2026-03-25 22:04:05.492675 | ubuntu-jammy | ok 2026-03-25 22:04:05.496992 | ubuntu-noble | ok 2026-03-25 22:04:05.501076 | 2026-03-25 22:04:05.501177 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-03-25 22:04:05.803258 | centos-9-stream -> localhost | ok 2026-03-25 22:04:05.810618 | 2026-03-25 22:04:05.820700 | TASK [validate-host : Collect information about the host] 2026-03-25 22:04:06.949550 | debian-bookworm | ok 2026-03-25 22:04:06.976315 | centos-9-stream | ok 2026-03-25 22:04:07.022854 | ubuntu-jammy | ok 2026-03-25 22:04:07.081804 | ubuntu-noble | ok 2026-03-25 22:04:07.092797 | 2026-03-25 22:04:07.092916 | TASK [validate-host : Sanitize hostname] 2026-03-25 22:04:07.252096 | debian-bookworm | ok 2026-03-25 22:04:07.266708 | centos-9-stream | ok 2026-03-25 22:04:07.280865 | ubuntu-noble | ok 2026-03-25 22:04:07.305615 | ubuntu-jammy | ok 2026-03-25 22:04:07.310005 | 2026-03-25 22:04:07.310108 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-03-25 22:04:07.874084 | centos-9-stream -> localhost | changed 2026-03-25 22:04:07.885662 | ubuntu-jammy -> localhost | changed 2026-03-25 22:04:07.896824 | debian-bookworm -> localhost | changed 2026-03-25 22:04:07.918280 | ubuntu-noble -> localhost | changed 2026-03-25 22:04:07.923135 | 2026-03-25 22:04:07.923245 | TASK [validate-host : Collect information about zuul worker] 2026-03-25 22:04:08.339369 | ubuntu-jammy | ok 2026-03-25 22:04:08.357003 | debian-bookworm | ok 2026-03-25 22:04:08.397581 | ubuntu-noble | ok 2026-03-25 22:04:08.421499 | centos-9-stream | ok 2026-03-25 22:04:08.430250 | 2026-03-25 22:04:08.430396 | TASK [validate-host : Write out all zuul information for each host] 2026-03-25 22:04:09.398442 | ubuntu-jammy -> localhost | changed 2026-03-25 22:04:09.420241 | centos-9-stream -> localhost | changed 2026-03-25 22:04:09.431450 | debian-bookworm -> localhost | changed 2026-03-25 22:04:09.615171 | ubuntu-noble -> localhost | changed 2026-03-25 22:04:09.633965 | 2026-03-25 22:04:09.634092 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-03-25 22:04:09.912067 | ubuntu-jammy | ok 2026-03-25 22:04:09.953309 | debian-bookworm | ok 2026-03-25 22:04:09.958018 | centos-9-stream | ok 2026-03-25 22:04:09.998172 | ubuntu-noble | ok 2026-03-25 22:04:10.006043 | 2026-03-25 22:04:10.006201 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-03-25 22:04:11.359921 | ubuntu-noble | changed: 2026-03-25 22:04:11.360311 | ubuntu-noble | cd+++++++++ src/ 2026-03-25 22:04:11.360354 | ubuntu-noble | cd+++++++++ src/github.com/ 2026-03-25 22:04:11.360389 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2026-03-25 22:04:11.360412 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-03-25 22:04:11.360433 | ubuntu-noble | =3.12; 13.0.0a1 Requires-Python >=3.12; 13.0.0a2 Requires-Python >=3.12; 13.0.0a3 Requires-Python >=3.12; 13.0.0a4 Requires-Python >=3.12; 13.0.0a5 Requires-Python >=3.12; 13.0.0b1 Requires-Python >=3.12; 13.0.0rc1 Requires-Python >=3.12; 13.1.0 Requires-Python >=3.12; 13.2.0 Requires-Python >=3.12; 13.3.0 Requires-Python >=3.12; 13.4.0 Requires-Python >=3.12; 13.5.0 Requires-Python >=3.12\nERROR: Could not find a version that satisfies the requirement ansible==13.5.0 (from versions: 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.10, 1.7, 1.7.1, 1.7.2, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0.1, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.1.0, 2.0.2.0, 2.1.0.0, 2.1.1.0, 2.1.2.0, 2.1.3.0, 2.1.4.0, 2.1.5.0, 2.1.6.0, 2.2.0.0, 2.2.1.0, 2.2.2.0, 2.2.3.0, 2.3.0.0, 2.3.1.0, 2.3.2.0, 2.3.3.0, 2.4.0.0, 2.4.1.0, 2.4.2.0, 2.4.3.0, 2.4.4.0, 2.4.5.0, 2.4.6.0, 2.5.0a1, 2.5.0b1, 2.5.0b2, 2.5.0rc1, 2.5.0rc2, 2.5.0rc3, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2.5.11, 2.5.12, 2.5.13, 2.5.14, 2.5.15, 2.6.0a1, 2.6.0a2, 2.6.0rc1, 2.6.0rc2, 2.6.0rc3, 2.6.0rc4, 2.6.0rc5, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.7.0.dev0, 2.7.0a1, 2.7.0b1, 2.7.0rc1, 2.7.0rc2, 2.7.0rc3, 2.7.0rc4, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.10, 2.7.11, 2.7.12, 2.7.13, 2.7.14, 2.7.15, 2.7.16, 2.7.17, 2.7.18, 2.8.0a1, 2.8.0b1, 2.8.0rc1, 2.8.0rc2, 2.8.0rc3, 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.10, 2.8.11, 2.8.12, 2.8.13, 2.8.14, 2.8.15, 2.8.16rc1, 2.8.16, 2.8.17rc1, 2.8.17, 2.8.18rc1, 2.8.18, 2.8.19rc1, 2.8.19, 2.8.20rc1, 2.8.20, 2.9.0b1, 2.9.0rc1, 2.9.0rc2, 2.9.0rc3, 2.9.0rc4, 2.9.0rc5, 2.9.0, 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9, 2.9.10, 2.9.11, 2.9.12, 2.9.13, 2.9.14rc1, 2.9.14, 2.9.15rc1, 2.9.15, 2.9.16rc1, 2.9.16, 2.9.17rc1, 2.9.17, 2.9.18rc1, 2.9.18, 2.9.19rc1, 2.9.19, 2.9.20rc1, 2.9.20, 2.9.21rc1, 2.9.21, 2.9.22rc1, 2.9.22, 2.9.23rc1, 2.9.23, 2.9.24rc1, 2.9.24, 2.9.25rc1, 2.9.25, 2.9.26rc1, 2.9.26, 2.9.27rc1, 2.9.27, 2.10.0a1, 2.10.0a2, 2.10.0a3, 2.10.0a4, 2.10.0a5, 2.10.0a6, 2.10.0a7, 2.10.0a8, 2.10.0a9, 2.10.0b1, 2.10.0b2, 2.10.0rc1, 2.10.0, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.10.6, 2.10.7, 3.0.0b1, 3.0.0rc1, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0a1, 4.0.0a2, 4.0.0a3, 4.0.0a4, 4.0.0b1, 4.0.0b2, 4.0.0rc1, 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, 4.9.0, 4.10.0, 5.0.0a1, 5.0.0a2, 5.0.0a3, 5.0.0b1, 5.0.0b2, 5.0.0rc1, 5.0.1, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.5.0, 5.6.0, 5.7.0, 5.7.1, 5.8.0, 5.9.0, 5.10.0, 6.0.0a1, 6.0.0a2, 6.0.0a3, 6.0.0b1, 6.0.0b2, 6.0.0rc1, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.5.0, 6.6.0, 6.7.0, 7.0.0a1, 7.0.0a2, 7.0.0b1, 7.0.0rc1, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.5.0, 7.6.0, 7.7.0, 8.0.0a1, 8.0.0a2, 8.0.0a3, 8.0.0b1, 8.0.0rc1, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.6.1, 8.7.0, 9.0.0a1, 9.0.0a2, 9.0.0a3, 9.0.0b1, 9.0.0rc1, 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.1, 9.6.1, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, 10.0.0a1, 10.0.0a2, 10.0.0a3, 10.0.0b1, 10.0.0rc1, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.0, 11.0.0a1, 11.0.0a2, 11.0.0b1, 11.0.0b2, 11.0.0rc1, 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 11.9.0, 11.10.0, 11.11.0, 11.12.0, 11.13.0, 12.0.0a1, 12.0.0a2, 12.0.0a3, 12.0.0a4, 12.0.0a5, 12.0.0a6, 12.0.0a7, 12.0.0a8, 12.0.0a9, 12.0.0b1, 12.0.0b2, 12.0.0b3, 12.0.0b4, 12.0.0b5, 12.0.0rc1, 12.0.0, 12.1.0, 12.2.0, 12.3.0)\nERROR: No matching distribution found for ansible==13.5.0\n\n[notice] A new release of pip available: 22.3.1 -> 26.0.1\n[notice] To update, run: pip install --upgrade pip\n" 2026-03-25 22:04:31.631937 | centos-9-stream | } failure 2026-03-25 22:04:31.644322 | 2026-03-25 22:04:31.644489 | TASK [ansible-molecule : Force update of package cache] 2026-03-25 22:04:35.681064 | debian-bookworm | changed 2026-03-25 22:04:38.408379 | ubuntu-jammy | changed 2026-03-25 22:04:38.655826 | ubuntu-noble | changed 2026-03-25 22:04:38.667050 | 2026-03-25 22:04:38.667233 | TASK [ansible-molecule : Set python_version] 2026-03-25 22:04:38.700423 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:38.712139 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:38.717268 | ubuntu-jammy | ok 2026-03-25 22:04:38.724757 | 2026-03-25 22:04:38.724877 | TASK [Install python] 2026-03-25 22:04:38.746014 | debian-bookworm | ok 2026-03-25 22:04:38.762353 | ubuntu-jammy | ok 2026-03-25 22:04:38.773427 | ubuntu-noble | ok 2026-03-25 22:04:38.820500 | 2026-03-25 22:04:38.820648 | TASK [ensure-python : Validate python_version value] 2026-03-25 22:04:38.851526 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:38.873089 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:38.917366 | ubuntu-jammy | ok: All assertions passed 2026-03-25 22:04:38.929321 | 2026-03-25 22:04:38.929540 | TASK [ensure-python : Install specified version of python interpreter and development files (DEB)] 2026-03-25 22:04:38.961645 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:38.983450 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:45.273765 | ubuntu-jammy | changed 2026-03-25 22:04:45.284013 | 2026-03-25 22:04:45.284161 | TASK [ensure-python : Pull in venv package] 2026-03-25 22:04:45.313806 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:45.335239 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.405492 | ubuntu-jammy | changed 2026-03-25 22:04:47.422810 | 2026-03-25 22:04:47.423193 | TASK [ensure-python : Set default RPM package name] 2026-03-25 22:04:47.455687 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:47.467109 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.477604 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.483690 | 2026-03-25 22:04:47.483807 | TASK [ensure-python : Set RPM package name for CentOS/RHEL 9 and Python 3.9] 2026-03-25 22:04:47.544287 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:47.567666 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.588733 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.594716 | 2026-03-25 22:04:47.594857 | TASK [ensure-python : Install RPM package] 2026-03-25 22:04:47.621534 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:47.642907 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.643250 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.649200 | 2026-03-25 22:04:47.649315 | TASK [ensure-python : Install python using pyenv] 2026-03-25 22:04:47.669891 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:47.683772 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.695207 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.715744 | 2026-03-25 22:04:47.715902 | TASK [ensure-python : Activate python using stow] 2026-03-25 22:04:47.749908 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:04:47.762476 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.773525 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:04:47.807352 | 2026-03-25 22:04:47.807476 | TASK [Install pip] 2026-03-25 22:04:47.851867 | debian-bookworm | ok 2026-03-25 22:04:47.852832 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:04:47.869065 | ubuntu-noble | ok 2026-03-25 22:04:47.938596 | 2026-03-25 22:04:47.938747 | TASK [ensure-pip : Check if pip is installed] 2026-03-25 22:04:58.551381 | debian-bookworm | ok: Runtime: 0:00:00.008195 2026-03-25 22:04:58.558282 | ubuntu-noble | ok: Runtime: 0:00:00.004356 2026-03-25 22:04:58.564279 | 2026-03-25 22:04:58.564384 | LOOP [ensure-pip : Install pip from packages] 2026-03-25 22:04:58.605718 | ubuntu-noble | ok: "/var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/untrusted/project_2/github.com/osism/openinfra-zuul-jobs/roles/ensure-pip/tasks/Debian.yaml" 2026-03-25 22:04:58.611781 | debian-bookworm | ok: "/var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/untrusted/project_2/github.com/osism/openinfra-zuul-jobs/roles/ensure-pip/tasks/Debian.yaml" 2026-03-25 22:04:58.625786 | ubuntu-noble | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/untrusted/project_2/github.com/osism/openinfra-zuul-jobs/roles/ensure-pip/tasks/Debian.yaml 2026-03-25 22:04:58.625887 | debian-bookworm | included: /var/lib/zuul/builds/87403c918a82407cbbb86afd37f43cd4/untrusted/project_2/github.com/osism/openinfra-zuul-jobs/roles/ensure-pip/tasks/Debian.yaml 2026-03-25 22:04:58.640845 | 2026-03-25 22:04:58.640960 | TASK [ensure-pip : Update package lists] 2026-03-25 22:05:00.089684 | debian-bookworm | ok 2026-03-25 22:05:00.647563 | ubuntu-noble | ok 2026-03-25 22:05:00.657034 | 2026-03-25 22:05:00.657300 | TASK [ensure-pip : Install Python 3 pip] 2026-03-25 22:05:05.354776 | debian-bookworm | changed 2026-03-25 22:05:07.521350 | ubuntu-noble | changed 2026-03-25 22:05:07.529126 | 2026-03-25 22:05:07.529252 | TASK [ensure-pip : Install Python 2 pip] 2026-03-25 22:05:07.579484 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:05:07.600557 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:05:07.608179 | 2026-03-25 22:05:07.608320 | TASK [ensure-pip : Ensure setuptools] 2026-03-25 22:05:07.660832 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:05:07.682127 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:05:07.689494 | 2026-03-25 22:05:07.689637 | TASK [ensure-pip : Check for ensurepip module] 2026-03-25 22:05:08.220333 | ubuntu-noble | usage: python -m ensurepip [-h] [--version] [-v] [-U] [--user] [--root ROOT] 2026-03-25 22:05:08.220511 | ubuntu-noble | [--altinstall] [--default-pip] 2026-03-25 22:05:08.220539 | ubuntu-noble | 2026-03-25 22:05:08.220556 | ubuntu-noble | options: 2026-03-25 22:05:08.220570 | ubuntu-noble | -h, --help show this help message and exit 2026-03-25 22:05:08.220590 | ubuntu-noble | --version Show the version of pip that is bundled with this Python. 2026-03-25 22:05:08.220605 | ubuntu-noble | -v, --verbose Give more output. Option is additive, and can be used up to 3 2026-03-25 22:05:08.220622 | ubuntu-noble | times. 2026-03-25 22:05:08.220637 | ubuntu-noble | -U, --upgrade Upgrade pip and dependencies, even if already installed. 2026-03-25 22:05:08.220646 | ubuntu-noble | --user Install using the user scheme. 2026-03-25 22:05:08.220657 | ubuntu-noble | --root ROOT Install everything relative to this alternate root directory. 2026-03-25 22:05:08.220668 | ubuntu-noble | --altinstall Make an alternate install, installing only the X.Y versioned 2026-03-25 22:05:08.220679 | ubuntu-noble | scripts (Default: pipX, pipX.Y). 2026-03-25 22:05:08.220688 | ubuntu-noble | --default-pip Make a default pip install, installing the unqualified pip in 2026-03-25 22:05:08.220698 | ubuntu-noble | addition to the versioned scripts. 2026-03-25 22:05:08.162237 | debian-bookworm | usage: python -m ensurepip [-h] [--version] [-v] [-U] [--user] [--root ROOT] 2026-03-25 22:05:08.162376 | debian-bookworm | [--altinstall] [--default-pip] 2026-03-25 22:05:08.162398 | debian-bookworm | 2026-03-25 22:05:08.162413 | debian-bookworm | options: 2026-03-25 22:05:08.162430 | debian-bookworm | -h, --help show this help message and exit 2026-03-25 22:05:08.162450 | debian-bookworm | --version Show the version of pip that is bundled with this Python. 2026-03-25 22:05:08.162464 | debian-bookworm | -v, --verbose Give more output. Option is additive, and can be used up to 3 2026-03-25 22:05:08.162508 | debian-bookworm | times. 2026-03-25 22:05:08.162531 | debian-bookworm | -U, --upgrade Upgrade pip and dependencies, even if already installed. 2026-03-25 22:05:08.162546 | debian-bookworm | --user Install using the user scheme. 2026-03-25 22:05:08.162559 | debian-bookworm | --root ROOT Install everything relative to this alternate root directory. 2026-03-25 22:05:08.162571 | debian-bookworm | --altinstall Make an alternate install, installing only the X.Y versioned 2026-03-25 22:05:08.162583 | debian-bookworm | scripts (Default: pipX, pipX.Y, easy_install-X.Y). 2026-03-25 22:05:08.162594 | debian-bookworm | --default-pip Make a default pip install, installing the unqualified pip 2026-03-25 22:05:08.162605 | debian-bookworm | and easy_install in addition to the versioned scripts. 2026-03-25 22:05:18.361374 | debian-bookworm | ok: Runtime: 0:00:00.077502 2026-03-25 22:05:18.376497 | ubuntu-noble | ok: Runtime: 0:00:00.118037 2026-03-25 22:05:18.389110 | 2026-03-25 22:05:18.389282 | TASK [ensure-pip : Ensure python3-venv] 2026-03-25 22:05:18.418528 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:05:18.429824 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:05:18.436194 | 2026-03-25 22:05:18.436304 | TASK [ensure-pip : Install pip from source] 2026-03-25 22:05:18.461572 | debian-bookworm | skipping: Conditional result was False 2026-03-25 22:05:18.472772 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:05:18.480605 | 2026-03-25 22:05:18.480731 | TASK [ensure-pip : Probe for venv python full path] 2026-03-25 22:05:18.899813 | ubuntu-noble | /usr/bin/python3 2026-03-25 22:05:18.828178 | debian-bookworm | /usr/bin/python3 2026-03-25 22:05:29.109331 | debian-bookworm | ok: Runtime: 0:00:00.007437 2026-03-25 22:05:29.117901 | ubuntu-noble | ok: Runtime: 0:00:00.005952 2026-03-25 22:05:29.124801 | 2026-03-25 22:05:29.124923 | TASK [ensure-pip : Set host default] 2026-03-25 22:05:29.201845 | ubuntu-noble | ok 2026-03-25 22:05:29.208307 | debian-bookworm | ok 2026-03-25 22:05:29.214332 | 2026-03-25 22:05:29.214443 | TASK [ensure-pip : Set ensure_pip_virtualenv_command] 2026-03-25 22:05:29.280455 | debian-bookworm | ok 2026-03-25 22:05:29.287619 | ubuntu-noble | ok 2026-03-25 22:05:29.302676 | 2026-03-25 22:05:29.302792 | TASK [ansible-molecule : Install Ansible 13.5.0] 2026-03-25 22:05:29.344231 | ubuntu-jammy | skipping: Conditional result was False 2026-03-25 22:05:34.131309 | debian-bookworm | ERROR 2026-03-25 22:05:34.131617 | debian-bookworm | { 2026-03-25 22:05:34.131691 | debian-bookworm | "msg": "\n:stderr: ERROR: Ignored the following versions that require a different python version: 13.0.0 Requires-Python >=3.12; 13.0.0a1 Requires-Python >=3.12; 13.0.0a2 Requires-Python >=3.12; 13.0.0a3 Requires-Python >=3.12; 13.0.0a4 Requires-Python >=3.12; 13.0.0a5 Requires-Python >=3.12; 13.0.0b1 Requires-Python >=3.12; 13.0.0rc1 Requires-Python >=3.12; 13.1.0 Requires-Python >=3.12; 13.2.0 Requires-Python >=3.12; 13.3.0 Requires-Python >=3.12; 13.4.0 Requires-Python >=3.12; 13.5.0 Requires-Python >=3.12\nERROR: Could not find a version that satisfies the requirement ansible==13.5.0 (from versions: 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.10, 1.7, 1.7.1, 1.7.2, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0.1, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.1.0, 2.0.2.0, 2.1.0.0, 2.1.1.0, 2.1.2.0, 2.1.3.0, 2.1.4.0, 2.1.5.0, 2.1.6.0, 2.2.0.0, 2.2.1.0, 2.2.2.0, 2.2.3.0, 2.3.0.0, 2.3.1.0, 2.3.2.0, 2.3.3.0, 2.4.0.0, 2.4.1.0, 2.4.2.0, 2.4.3.0, 2.4.4.0, 2.4.5.0, 2.4.6.0, 2.5.0a1, 2.5.0b1, 2.5.0b2, 2.5.0rc1, 2.5.0rc2, 2.5.0rc3, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2.5.11, 2.5.12, 2.5.13, 2.5.14, 2.5.15, 2.6.0a1, 2.6.0a2, 2.6.0rc1, 2.6.0rc2, 2.6.0rc3, 2.6.0rc4, 2.6.0rc5, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.7.0.dev0, 2.7.0a1, 2.7.0b1, 2.7.0rc1, 2.7.0rc2, 2.7.0rc3, 2.7.0rc4, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.10, 2.7.11, 2.7.12, 2.7.13, 2.7.14, 2.7.15, 2.7.16, 2.7.17, 2.7.18, 2.8.0a1, 2.8.0b1, 2.8.0rc1, 2.8.0rc2, 2.8.0rc3, 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.10, 2.8.11, 2.8.12, 2.8.13, 2.8.14, 2.8.15, 2.8.16rc1, 2.8.16, 2.8.17rc1, 2.8.17, 2.8.18rc1, 2.8.18, 2.8.19rc1, 2.8.19, 2.8.20rc1, 2.8.20, 2.9.0b1, 2.9.0rc1, 2.9.0rc2, 2.9.0rc3, 2.9.0rc4, 2.9.0rc5, 2.9.0, 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9, 2.9.10, 2.9.11, 2.9.12, 2.9.13, 2.9.14rc1, 2.9.14, 2.9.15rc1, 2.9.15, 2.9.16rc1, 2.9.16, 2.9.17rc1, 2.9.17, 2.9.18rc1, 2.9.18, 2.9.19rc1, 2.9.19, 2.9.20rc1, 2.9.20, 2.9.21rc1, 2.9.21, 2.9.22rc1, 2.9.22, 2.9.23rc1, 2.9.23, 2.9.24rc1, 2.9.24, 2.9.25rc1, 2.9.25, 2.9.26rc1, 2.9.26, 2.9.27rc1, 2.9.27, 2.10.0a1, 2.10.0a2, 2.10.0a3, 2.10.0a4, 2.10.0a5, 2.10.0a6, 2.10.0a7, 2.10.0a8, 2.10.0a9, 2.10.0b1, 2.10.0b2, 2.10.0rc1, 2.10.0, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.10.6, 2.10.7, 3.0.0b1, 3.0.0rc1, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0a1, 4.0.0a2, 4.0.0a3, 4.0.0a4, 4.0.0b1, 4.0.0b2, 4.0.0rc1, 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, 4.9.0, 4.10.0, 5.0.0a1, 5.0.0a2, 5.0.0a3, 5.0.0b1, 5.0.0b2, 5.0.0rc1, 5.0.1, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.5.0, 5.6.0, 5.7.0, 5.7.1, 5.8.0, 5.9.0, 5.10.0, 6.0.0a1, 6.0.0a2, 6.0.0a3, 6.0.0b1, 6.0.0b2, 6.0.0rc1, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.5.0, 6.6.0, 6.7.0, 7.0.0a1, 7.0.0a2, 7.0.0b1, 7.0.0rc1, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.5.0, 7.6.0, 7.7.0, 8.0.0a1, 8.0.0a2, 8.0.0a3, 8.0.0b1, 8.0.0rc1, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.6.1, 8.7.0, 9.0.0a1, 9.0.0a2, 9.0.0a3, 9.0.0b1, 9.0.0rc1, 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.1, 9.6.1, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, 10.0.0a1, 10.0.0a2, 10.0.0a3, 10.0.0b1, 10.0.0rc1, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.0, 11.0.0a1, 11.0.0a2, 11.0.0b1, 11.0.0b2, 11.0.0rc1, 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 11.9.0, 11.10.0, 11.11.0, 11.12.0, 11.13.0, 12.0.0a1, 12.0.0a2, 12.0.0a3, 12.0.0a4, 12.0.0a5, 12.0.0a6, 12.0.0a7, 12.0.0a8, 12.0.0a9, 12.0.0b1, 12.0.0b2, 12.0.0b3, 12.0.0b4, 12.0.0b5, 12.0.0rc1, 12.0.0, 12.1.0, 12.2.0, 12.3.0)\nERROR: No matching distribution found for ansible==13.5.0\n" 2026-03-25 22:05:34.131785 | debian-bookworm | } 2026-03-25 22:06:09.827979 | ubuntu-noble | changed 2026-03-25 22:06:09.837588 | 2026-03-25 22:06:09.837726 | TASK [ansible-molecule : Install Ansible 13.5.0] 2026-03-25 22:06:09.868802 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:06:15.132111 | ubuntu-jammy | ERROR 2026-03-25 22:06:15.132380 | ubuntu-jammy | { 2026-03-25 22:06:15.132442 | ubuntu-jammy | "msg": "\n:stderr: ERROR: Could not find a version that satisfies the requirement ansible==13.5.0 (from versions: 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.10, 1.7, 1.7.1, 1.7.2, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0.1, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.1.0, 2.0.2.0, 2.1.0.0, 2.1.1.0, 2.1.2.0, 2.1.3.0, 2.1.4.0, 2.1.5.0, 2.1.6.0, 2.2.0.0, 2.2.1.0, 2.2.2.0, 2.2.3.0, 2.3.0.0, 2.3.1.0, 2.3.2.0, 2.3.3.0, 2.4.0.0, 2.4.1.0, 2.4.2.0, 2.4.3.0, 2.4.4.0, 2.4.5.0, 2.4.6.0, 2.5.0a1, 2.5.0b1, 2.5.0b2, 2.5.0rc1, 2.5.0rc2, 2.5.0rc3, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2.5.11, 2.5.12, 2.5.13, 2.5.14, 2.5.15, 2.6.0a1, 2.6.0a2, 2.6.0rc1, 2.6.0rc2, 2.6.0rc3, 2.6.0rc4, 2.6.0rc5, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.7.0.dev0, 2.7.0a1, 2.7.0b1, 2.7.0rc1, 2.7.0rc2, 2.7.0rc3, 2.7.0rc4, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.10, 2.7.11, 2.7.12, 2.7.13, 2.7.14, 2.7.15, 2.7.16, 2.7.17, 2.7.18, 2.8.0a1, 2.8.0b1, 2.8.0rc1, 2.8.0rc2, 2.8.0rc3, 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.10, 2.8.11, 2.8.12, 2.8.13, 2.8.14, 2.8.15, 2.8.16rc1, 2.8.16, 2.8.17rc1, 2.8.17, 2.8.18rc1, 2.8.18, 2.8.19rc1, 2.8.19, 2.8.20rc1, 2.8.20, 2.9.0b1, 2.9.0rc1, 2.9.0rc2, 2.9.0rc3, 2.9.0rc4, 2.9.0rc5, 2.9.0, 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9, 2.9.10, 2.9.11, 2.9.12, 2.9.13, 2.9.14rc1, 2.9.14, 2.9.15rc1, 2.9.15, 2.9.16rc1, 2.9.16, 2.9.17rc1, 2.9.17, 2.9.18rc1, 2.9.18, 2.9.19rc1, 2.9.19, 2.9.20rc1, 2.9.20, 2.9.21rc1, 2.9.21, 2.9.22rc1, 2.9.22, 2.9.23rc1, 2.9.23, 2.9.24rc1, 2.9.24, 2.9.25rc1, 2.9.25, 2.9.26rc1, 2.9.26, 2.9.27rc1, 2.9.27, 2.10.0a1, 2.10.0a2, 2.10.0a3, 2.10.0a4, 2.10.0a5, 2.10.0a6, 2.10.0a7, 2.10.0a8, 2.10.0a9, 2.10.0b1, 2.10.0b2, 2.10.0rc1, 2.10.0, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.10.6, 2.10.7, 3.0.0b1, 3.0.0rc1, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 4.0.0a1, 4.0.0a2, 4.0.0a3, 4.0.0a4, 4.0.0b1, 4.0.0b2, 4.0.0rc1, 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, 4.9.0, 4.10.0, 5.0.0a1, 5.0.0a2, 5.0.0a3, 5.0.0b1, 5.0.0b2, 5.0.0rc1, 5.0.1, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.5.0, 5.6.0, 5.7.0, 5.7.1, 5.8.0, 5.9.0, 5.10.0, 6.0.0a1, 6.0.0a2, 6.0.0a3, 6.0.0b1, 6.0.0b2, 6.0.0rc1, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.5.0, 6.6.0, 6.7.0, 7.0.0a1, 7.0.0a2, 7.0.0b1, 7.0.0rc1, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.5.0, 7.6.0, 7.7.0, 8.0.0a1, 8.0.0a2, 8.0.0a3, 8.0.0b1, 8.0.0rc1, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.6.1, 8.7.0, 9.0.0a1, 9.0.0a2, 9.0.0a3, 9.0.0b1, 9.0.0rc1, 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.1, 9.6.1, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, 10.0.0a1, 10.0.0a2, 10.0.0a3, 10.0.0b1, 10.0.0rc1, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.0, 11.0.0a1, 11.0.0a2, 11.0.0b1, 11.0.0b2, 11.0.0rc1, 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 11.9.0, 11.10.0, 11.11.0, 11.12.0, 11.13.0, 12.0.0a1, 12.0.0a2, 12.0.0a3, 12.0.0a4, 12.0.0a5, 12.0.0a6, 12.0.0a7, 12.0.0a8, 12.0.0a9, 12.0.0b1, 12.0.0b2, 12.0.0b3, 12.0.0b4, 12.0.0b5, 12.0.0rc1, 12.0.0, 12.1.0, 12.2.0, 12.3.0)\nERROR: No matching distribution found for ansible==13.5.0\n" 2026-03-25 22:06:15.132507 | ubuntu-jammy | } 2026-03-25 22:06:15.140840 | 2026-03-25 22:06:15.140975 | TASK [ansible-molecule : Install requests] 2026-03-25 22:06:17.534488 | ubuntu-noble | changed 2026-03-25 22:06:17.544305 | 2026-03-25 22:06:17.544467 | TASK [ansible-molecule : Install requirements] 2026-03-25 22:06:26.047304 | ubuntu-noble | changed 2026-03-25 22:06:26.056936 | 2026-03-25 22:06:26.057130 | TASK [ansible-molecule : Run molecule dependency action with scenario delegated] 2026-03-25 22:06:26.806840 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-03-25 22:06:26.835432 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:06:27.589400 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:06:27.590024 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-03-25 22:06:27.600939 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2026-03-25 22:06:27.601005 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2026-03-25 22:06:27.601341 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-03-25 22:06:27.601451 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-03-25 22:06:29.211443 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-03-25 22:06:29.211804 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-03-25 22:06:29.767121 | ubuntu-noble | ansible-galaxy [core 2.20.4] 2026-03-25 22:06:29.767549 | ubuntu-noble | config file = None 2026-03-25 22:06:29.767987 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-03-25 22:06:29.769086 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-03-25 22:06:29.769133 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-03-25 22:06:29.769202 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-03-25 22:06:29.769578 | ubuntu-noble | python version = 3.12.3 (main, Mar 3 2026, 12:15:18) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-03-25 22:06:29.769917 | ubuntu-noble | jinja version = 3.1.6 2026-03-25 22:06:29.770359 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2026-03-25 22:06:29.770672 | ubuntu-noble | No config file found; using defaults 2026-03-25 22:06:29.771218 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-03-25 22:06:29.779114 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-03-25 22:06:29.779768 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-03-25 22:06:29.780236 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-03-25 22:06:29.781642 | ubuntu-noble | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-03-25 22:06:29.781678 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-03-25 22:06:29.781693 | ubuntu-noble | Found installed collection kubernetes.core:6.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-03-25 22:06:29.787112 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-03-25 22:06:29.787171 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-03-25 22:06:29.787183 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-03-25 22:06:29.787689 | ubuntu-noble | Found installed collection wti.remote:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-03-25 22:06:29.788265 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-03-25 22:06:29.788695 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-03-25 22:06:29.789278 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-03-25 22:06:29.789657 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-03-25 22:06:29.790209 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-03-25 22:06:29.790737 | ubuntu-noble | Found installed collection google.cloud:1.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-03-25 22:06:29.791182 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-03-25 22:06:29.791654 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-03-25 22:06:29.792181 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-03-25 22:06:29.792566 | ubuntu-noble | Found installed collection netapp.ontap:23.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-03-25 22:06:29.793122 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-03-25 22:06:29.793503 | ubuntu-noble | Found installed collection community.dns:3.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-03-25 22:06:29.794350 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-03-25 22:06:29.794839 | ubuntu-noble | Found installed collection cisco.nxos:11.1.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-03-25 22:06:29.796696 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-03-25 22:06:29.796723 | ubuntu-noble | Found installed collection hetzner.hcloud:6.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-03-25 22:06:29.797413 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-03-25 22:06:29.797436 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-03-25 22:06:29.798711 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-03-25 22:06:29.798736 | ubuntu-noble | Found installed collection community.postgresql:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-03-25 22:06:29.798744 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-03-25 22:06:29.798751 | ubuntu-noble | Found installed collection community.libvirt:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-03-25 22:06:29.800142 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-03-25 22:06:29.800168 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-03-25 22:06:29.800176 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-03-25 22:06:29.800183 | ubuntu-noble | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-03-25 22:06:29.800832 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-03-25 22:06:29.800863 | ubuntu-noble | Found installed collection community.crypto:3.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-03-25 22:06:29.802172 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-03-25 22:06:29.802443 | ubuntu-noble | Found installed collection amazon.aws:10.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-03-25 22:06:29.802730 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-03-25 22:06:29.803299 | ubuntu-noble | Found installed collection containers.podman:1.19.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-03-25 22:06:29.803319 | ubuntu-noble | Loading collection graphiant.naas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/graphiant/naas 2026-03-25 22:06:29.803572 | ubuntu-noble | Found installed collection graphiant.naas:26.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/graphiant/naas' 2026-03-25 22:06:29.803836 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-03-25 22:06:29.804143 | ubuntu-noble | Found installed collection ansible.utils:6.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-03-25 22:06:29.804431 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-03-25 22:06:29.804699 | ubuntu-noble | Found installed collection purestorage.flasharray:1.42.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-03-25 22:06:29.804966 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-03-25 22:06:29.805326 | ubuntu-noble | Found installed collection ansible.netcommon:8.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-03-25 22:06:29.810905 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-03-25 22:06:29.811309 | ubuntu-noble | Found installed collection community.aws:10.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-03-25 22:06:29.811705 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-03-25 22:06:29.811964 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-03-25 22:06:29.812319 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-03-25 22:06:29.812582 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-03-25 22:06:29.813392 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-03-25 22:06:29.813693 | ubuntu-noble | Found installed collection netbox.netbox:3.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-03-25 22:06:29.816096 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-03-25 22:06:29.816129 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-03-25 22:06:29.816136 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-03-25 22:06:29.816142 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-03-25 22:06:29.816161 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-03-25 22:06:29.816167 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-03-25 22:06:29.816173 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-03-25 22:06:29.816289 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-03-25 22:06:29.819453 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-03-25 22:06:29.819781 | ubuntu-noble | Found installed collection fortinet.fortios:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-03-25 22:06:29.820599 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-03-25 22:06:29.820919 | ubuntu-noble | Found installed collection arista.eos:12.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-03-25 22:06:29.821206 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-03-25 22:06:29.821456 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-03-25 22:06:29.821692 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-03-25 22:06:29.821927 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-03-25 22:06:29.822567 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-03-25 22:06:29.822800 | ubuntu-noble | Found installed collection dellemc.openmanage:10.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-03-25 22:06:29.823649 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-03-25 22:06:29.823960 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-03-25 22:06:29.824621 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-03-25 22:06:29.824889 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-03-25 22:06:29.825152 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-03-25 22:06:29.825397 | ubuntu-noble | Found installed collection cisco.intersight:2.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-03-25 22:06:29.825619 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-03-25 22:06:29.825836 | ubuntu-noble | Found installed collection cyberark.pas:1.0.39 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-03-25 22:06:29.827403 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-03-25 22:06:29.827771 | ubuntu-noble | Found installed collection theforeman.foreman:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-03-25 22:06:29.829801 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-03-25 22:06:29.830817 | ubuntu-noble | Found installed collection azure.azcollection:3.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-03-25 22:06:29.831602 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-03-25 22:06:29.832101 | ubuntu-noble | Found installed collection community.mysql:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-03-25 22:06:29.832507 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-03-25 22:06:29.832974 | ubuntu-noble | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-03-25 22:06:29.833598 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-03-25 22:06:29.833945 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-03-25 22:06:29.834794 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-03-25 22:06:29.835660 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-03-25 22:06:29.836520 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-03-25 22:06:29.837038 | ubuntu-noble | Found installed collection dellemc.powerflex:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-03-25 22:06:29.837686 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-03-25 22:06:29.838084 | ubuntu-noble | Found installed collection vultr.cloud:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-03-25 22:06:29.838581 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-03-25 22:06:29.838907 | ubuntu-noble | Found installed collection netapp.storagegrid:21.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-03-25 22:06:29.839282 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-03-25 22:06:29.839618 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-03-25 22:06:29.839977 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-03-25 22:06:29.840351 | ubuntu-noble | Found installed collection community.proxmox:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-03-25 22:06:29.842089 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-03-25 22:06:29.842117 | ubuntu-noble | Found installed collection kubevirt.core:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-03-25 22:06:29.842126 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-03-25 22:06:29.842133 | ubuntu-noble | Found installed collection cisco.dnac:6.48.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-03-25 22:06:29.842140 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-03-25 22:06:29.842325 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-03-25 22:06:29.842645 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-03-25 22:06:29.842946 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-03-25 22:06:29.843561 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-03-25 22:06:29.843860 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-03-25 22:06:29.844320 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-03-25 22:06:29.844612 | ubuntu-noble | Found installed collection community.hrobot:2.7.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-03-25 22:06:29.850654 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-03-25 22:06:29.850953 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-03-25 22:06:29.851445 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-03-25 22:06:29.851757 | ubuntu-noble | Found installed collection community.mongodb:1.7.12 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-03-25 22:06:29.852113 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-03-25 22:06:29.852421 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-03-25 22:06:29.852991 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-03-25 22:06:29.853337 | ubuntu-noble | Found installed collection cisco.ios:11.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-03-25 22:06:29.865863 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-03-25 22:06:29.866607 | ubuntu-noble | Found installed collection community.general:12.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-03-25 22:06:29.867077 | ubuntu-noble | Loading collection community.clickhouse from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/clickhouse 2026-03-25 22:06:29.867499 | ubuntu-noble | Found installed collection community.clickhouse:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/clickhouse' 2026-03-25 22:06:29.868073 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-03-25 22:06:29.868587 | ubuntu-noble | Found installed collection community.vmware:6.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-03-25 22:06:29.869107 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-03-25 22:06:29.869527 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-03-25 22:06:29.869989 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-03-25 22:06:29.870417 | ubuntu-noble | Found installed collection community.routeros:3.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-03-25 22:06:29.871355 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-03-25 22:06:29.871387 | ubuntu-noble | Found installed collection cisco.iosxr:12.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-03-25 22:06:29.872325 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-03-25 22:06:29.872376 | ubuntu-noble | Found installed collection cisco.mso:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-03-25 22:06:29.875146 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-03-25 22:06:29.875504 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-03-25 22:06:29.879122 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-03-25 22:06:29.879154 | ubuntu-noble | Found installed collection ngine_io.cloudstack:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-03-25 22:06:29.879163 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-03-25 22:06:29.879380 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-03-25 22:06:29.880097 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-03-25 22:06:29.880447 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-03-25 22:06:29.880767 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-03-25 22:06:29.881149 | ubuntu-noble | Found installed collection ibm.storage_virtualize:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-03-25 22:06:29.883228 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-03-25 22:06:29.883977 | ubuntu-noble | Found installed collection cisco.meraki:2.23.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-03-25 22:06:29.884768 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-03-25 22:06:29.886086 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-03-25 22:06:29.886123 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-03-25 22:06:29.886134 | ubuntu-noble | Found installed collection community.sap_libs:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-03-25 22:06:29.886479 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-03-25 22:06:29.886895 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-03-25 22:06:29.887320 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-03-25 22:06:29.887694 | ubuntu-noble | Found installed collection community.docker:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-03-25 22:06:29.888280 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-03-25 22:06:29.888626 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-03-25 22:06:29.888963 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-03-25 22:06:29.889417 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-03-25 22:06:29.889771 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-03-25 22:06:29.890144 | ubuntu-noble | Found installed collection ieisystem.inmanage:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-03-25 22:06:29.890473 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-03-25 22:06:29.890803 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-03-25 22:06:29.891273 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-03-25 22:06:29.891601 | ubuntu-noble | Found installed collection community.windows:3.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-03-25 22:06:29.892073 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-03-25 22:06:29.894110 | ubuntu-noble | Found installed collection purestorage.flashblade:1.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-03-25 22:06:29.894143 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-03-25 22:06:29.894153 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-03-25 22:06:29.894162 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-03-25 22:06:29.894171 | ubuntu-noble | Found installed collection ansible.windows:3.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-03-25 22:06:29.894180 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-03-25 22:06:29.894548 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-03-25 22:06:29.894864 | ubuntu-noble | Loading collection pcg.alpaca_operator from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/pcg/alpaca_operator 2026-03-25 22:06:29.895468 | ubuntu-noble | Found installed collection pcg.alpaca_operator:2.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/pcg/alpaca_operator' 2026-03-25 22:06:29.895775 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-03-25 22:06:29.896082 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-03-25 22:06:29.896417 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-03-25 22:06:29.896675 | ubuntu-noble | Found installed collection vmware.vmware:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-03-25 22:06:29.896930 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-03-25 22:06:29.897302 | ubuntu-noble | Found installed collection check_point.mgmt:6.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-03-25 22:06:29.914221 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-03-25 22:06:29.914664 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-03-25 22:06:29.919578 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-03-25 22:06:29.920033 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-03-25 22:06:29.920394 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-03-25 22:06:30.155138 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-03-25 22:06:30.155579 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-03-25 22:06:30.694252 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-03-25 22:06:31.299955 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260318.0/ 2026-03-25 22:06:31.785350 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260318.0 2026-03-25 22:06:31.786413 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260318.0' from Ansible Galaxy 2026-03-25 22:06:33.111472 | ubuntu-noble | Validating downloaded file hash a8b0daa997f8a6a43297328a901f89a21e28c6a6ab16356fcbec4c59b6328e15 with expected hash a8b0daa997f8a6a43297328a901f89a21e28c6a6ab16356fcbec4c59b6328e15 2026-03-25 22:06:33.111575 | ubuntu-noble | Collection 'osism.commons:0.20260318.0' obtained from server default https://galaxy.ansible.com/api/ 2026-03-25 22:06:33.309138 | ubuntu-noble | Starting galaxy collection install process 2026-03-25 22:06:33.309218 | ubuntu-noble | Process install dependency map 2026-03-25 22:06:33.309444 | ubuntu-noble | Starting collection install process 2026-03-25 22:06:33.309817 | ubuntu-noble | 'ansible.posix:2.1.0' is already installed, skipping. 2026-03-25 22:06:33.310253 | ubuntu-noble | 'community.docker:5.1.0' is already installed, skipping. 2026-03-25 22:06:33.310617 | ubuntu-noble | 'community.general:12.5.0' is already installed, skipping. 2026-03-25 22:06:33.311112 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260318.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1604goyte82c/tmp3s2x2uzr/osism-commons-0.20260318.0-ur15je4z 2026-03-25 22:06:33.311479 | ubuntu-noble | Installing 'osism.commons:0.20260318.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-03-25 22:06:33.311816 | ubuntu-noble | osism.commons:0.20260318.0 was installed successfully 2026-03-25 22:06:33.312181 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-03-25 22:06:33.422373 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-03-25 22:06:33.423390 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-03-25 22:06:33.423867 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-03-25 22:06:43.674685 | ubuntu-noble | ok: Runtime: 0:00:07.084828 2026-03-25 22:06:43.692103 | 2026-03-25 22:06:43.692316 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-03-25 22:06:44.319742 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:06:44.333382 | 2026-03-25 22:06:44.333572 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-03-25 22:06:45.063812 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-03-25 22:06:45.072481 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:06:45.696416 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:06:45.697092 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-03-25 22:06:45.707358 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2026-03-25 22:06:45.707429 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2026-03-25 22:06:45.707678 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-03-25 22:06:45.707790 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-03-25 22:06:47.191757 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-03-25 22:06:47.635810 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-03-25 22:06:47.635861 | ubuntu-noble | config file = None 2026-03-25 22:06:47.635875 | ubuntu-noble | configured module search path = 2026-03-25 22:06:47.635880 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-03-25 22:06:47.635884 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-03-25 22:06:47.635888 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-03-25 22:06:47.635892 | ubuntu-noble | python version = 3.12.3 (main, Mar 3 2026, 12:15:18) (/home/zuul/venv/bin/python3) 2026-03-25 22:06:47.635895 | ubuntu-noble | jinja version = 3.1.6 2026-03-25 22:06:47.635899 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2026-03-25 22:06:47.636227 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-03-25 22:06:47.636236 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-03-25 22:06:47.636240 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-03-25 22:06:47.636243 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-03-25 22:06:47.636247 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-03-25 22:06:47.636250 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-03-25 22:06:47.636254 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-03-25 22:06:47.636257 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-03-25 22:06:47.636261 | ubuntu-noble | 2026-03-25 22:06:47.636495 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-03-25 22:06:47.636500 | ubuntu-noble | MOLECULE_DEBUG: True 2026-03-25 22:06:47.636504 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-03-25 22:06:47.636507 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-03-25 22:06:47.636511 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-03-25 22:06:47.636514 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-03-25 22:06:47.636518 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-03-25 22:06:47.636521 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-03-25 22:06:47.636534 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-03-25 22:06:47.636538 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-03-25 22:06:47.636541 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-03-25 22:06:47.636545 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-03-25 22:06:47.636548 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-03-25 22:06:47.636551 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-03-25 22:06:47.636554 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-03-25 22:06:47.636558 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:06:47.636562 | ubuntu-noble | 2026-03-25 22:06:47.636818 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:06:47.864945 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2026-03-25 22:06:47.865686 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2026-03-25 22:06:47.866987 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2026-03-25 22:06:47.867038 | ubuntu-noble | 2026-03-25 22:06:48.036692 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-03-25 22:06:48.311800 | ubuntu-noble | 2026-03-25 22:06:48.311866 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-03-25 22:06:48.311882 | ubuntu-noble | 2026-03-25 22:06:48.314376 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-03-25 22:06:49.587719 | ubuntu-noble | ok: [molecule-auditd] 2026-03-25 22:06:49.588151 | ubuntu-noble | 2026-03-25 22:06:49.588539 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-03-25 22:06:54.172977 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.33.0)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.6.3)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.6)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.11)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.2.25)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.1 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.33.0)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.6.3)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.6)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.11)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.2.25)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.1 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-03-25 22:06:54.173858 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 14.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 14.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-03-25 22:06:54.174141 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.33.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.6)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.11)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.6.3)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.2.25)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.33.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.6)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.11)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.6.3)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.2.25)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-03-25 22:06:54.174335 | ubuntu-noble | 2026-03-25 22:06:54.174567 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-03-25 22:06:54.198523 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-03-25 22:06:54.200083 | ubuntu-noble | 2026-03-25 22:06:54.200117 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-03-25 22:06:54.200123 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-03-25 22:06:54.200138 | ubuntu-noble | 2026-03-25 22:06:54.278684 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-03-25 22:06:54.280118 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-03-25 22:07:04.476668 | ubuntu-noble | ok: Runtime: 0:00:09.593547 2026-03-25 22:07:04.489316 | 2026-03-25 22:07:04.489484 | TASK [ansible-molecule : Reset connection] 2026-03-25 22:07:04.534136 | 2026-03-25 22:07:04.534354 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-03-25 22:07:05.526197 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-03-25 22:07:05.535796 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:07:06.159940 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:07:06.160678 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-03-25 22:07:06.171592 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2026-03-25 22:07:06.171656 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2026-03-25 22:07:06.171879 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-03-25 22:07:06.171984 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-03-25 22:07:07.611248 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-03-25 22:07:07.611774 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-03-25 22:07:08.103085 | ubuntu-noble | ansible-galaxy [core 2.20.4] 2026-03-25 22:07:08.103125 | ubuntu-noble | config file = None 2026-03-25 22:07:08.103131 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-03-25 22:07:08.103136 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-03-25 22:07:08.103145 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-03-25 22:07:08.103152 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-03-25 22:07:08.103156 | ubuntu-noble | python version = 3.12.3 (main, Mar 3 2026, 12:15:18) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-03-25 22:07:08.103163 | ubuntu-noble | jinja version = 3.1.6 2026-03-25 22:07:08.103388 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2026-03-25 22:07:08.103618 | ubuntu-noble | No config file found; using defaults 2026-03-25 22:07:08.104079 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-03-25 22:07:08.115038 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-03-25 22:07:08.115410 | ubuntu-noble | Found installed collection google.cloud:1.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-03-25 22:07:08.115784 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-03-25 22:07:08.116258 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-03-25 22:07:08.116734 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-03-25 22:07:08.117211 | ubuntu-noble | Found installed collection wti.remote:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-03-25 22:07:08.119036 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-03-25 22:07:08.119483 | ubuntu-noble | Found installed collection azure.azcollection:3.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-03-25 22:07:08.119901 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-03-25 22:07:08.120335 | ubuntu-noble | Found installed collection community.postgresql:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-03-25 22:07:08.120635 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-03-25 22:07:08.121108 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-03-25 22:07:08.121424 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-03-25 22:07:08.121796 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-03-25 22:07:08.122737 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-03-25 22:07:08.123288 | ubuntu-noble | Found installed collection community.vmware:6.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-03-25 22:07:08.123718 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-03-25 22:07:08.124024 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-03-25 22:07:08.124597 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-03-25 22:07:08.124882 | ubuntu-noble | Found installed collection dellemc.openmanage:10.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-03-25 22:07:08.125811 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-03-25 22:07:08.126122 | ubuntu-noble | Found installed collection netapp.ontap:23.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-03-25 22:07:08.126579 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-03-25 22:07:08.126886 | ubuntu-noble | Found installed collection dellemc.powerflex:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-03-25 22:07:08.127401 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-03-25 22:07:08.127727 | ubuntu-noble | Found installed collection community.docker:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-03-25 22:07:08.130454 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-03-25 22:07:08.130776 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-03-25 22:07:08.131150 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-03-25 22:07:08.131468 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-03-25 22:07:08.131782 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-03-25 22:07:08.132123 | ubuntu-noble | Found installed collection purestorage.flasharray:1.42.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-03-25 22:07:08.132378 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-03-25 22:07:08.132702 | ubuntu-noble | Found installed collection kubevirt.core:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-03-25 22:07:08.132944 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-03-25 22:07:08.133312 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-03-25 22:07:08.133548 | ubuntu-noble | Loading collection graphiant.naas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/graphiant/naas 2026-03-25 22:07:08.133864 | ubuntu-noble | Found installed collection graphiant.naas:26.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/graphiant/naas' 2026-03-25 22:07:08.134355 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-03-25 22:07:08.134670 | ubuntu-noble | Found installed collection cisco.ios:11.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-03-25 22:07:08.134997 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-03-25 22:07:08.135329 | ubuntu-noble | Found installed collection community.mongodb:1.7.12 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-03-25 22:07:08.135648 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-03-25 22:07:08.135957 | ubuntu-noble | Found installed collection community.dns:3.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-03-25 22:07:08.136338 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-03-25 22:07:08.136658 | ubuntu-noble | Found installed collection community.hrobot:2.7.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-03-25 22:07:08.136996 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-03-25 22:07:08.137344 | ubuntu-noble | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-03-25 22:07:08.137715 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-03-25 22:07:08.138026 | ubuntu-noble | Found installed collection community.proxmox:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-03-25 22:07:08.138398 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-03-25 22:07:08.138739 | ubuntu-noble | Found installed collection kubernetes.core:6.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-03-25 22:07:08.139193 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-03-25 22:07:08.139598 | ubuntu-noble | Found installed collection containers.podman:1.19.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-03-25 22:07:08.139885 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-03-25 22:07:08.140296 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-03-25 22:07:08.140493 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-03-25 22:07:08.140761 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-03-25 22:07:08.140950 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-03-25 22:07:08.141537 | ubuntu-noble | Found installed collection cisco.dnac:6.48.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-03-25 22:07:08.141917 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-03-25 22:07:08.142190 | ubuntu-noble | Found installed collection ansible.utils:6.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-03-25 22:07:08.142403 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-03-25 22:07:08.142687 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-03-25 22:07:08.142896 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-03-25 22:07:08.143157 | ubuntu-noble | Found installed collection cisco.intersight:2.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-03-25 22:07:08.143427 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-03-25 22:07:08.143631 | ubuntu-noble | Found installed collection vultr.cloud:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-03-25 22:07:08.143900 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-03-25 22:07:08.144269 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-03-25 22:07:08.145120 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-03-25 22:07:08.145428 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-03-25 22:07:08.146112 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-03-25 22:07:08.146405 | ubuntu-noble | Found installed collection netbox.netbox:3.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-03-25 22:07:08.149066 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-03-25 22:07:08.149083 | ubuntu-noble | Found installed collection check_point.mgmt:6.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-03-25 22:07:08.149087 | ubuntu-noble | Loading collection pcg.alpaca_operator from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/pcg/alpaca_operator 2026-03-25 22:07:08.149091 | ubuntu-noble | Found installed collection pcg.alpaca_operator:2.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/pcg/alpaca_operator' 2026-03-25 22:07:08.149094 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-03-25 22:07:08.149098 | ubuntu-noble | Found installed collection community.libvirt:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-03-25 22:07:08.149101 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-03-25 22:07:08.149108 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-03-25 22:07:08.149342 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-03-25 22:07:08.149586 | ubuntu-noble | Found installed collection purestorage.flashblade:1.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-03-25 22:07:08.149825 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-03-25 22:07:08.150105 | ubuntu-noble | Found installed collection community.sap_libs:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-03-25 22:07:08.150606 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-03-25 22:07:08.150850 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-03-25 22:07:08.156395 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-03-25 22:07:08.156655 | ubuntu-noble | Found installed collection community.aws:10.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-03-25 22:07:08.158361 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-03-25 22:07:08.158601 | ubuntu-noble | Found installed collection community.windows:3.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-03-25 22:07:08.160184 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-03-25 22:07:08.160531 | ubuntu-noble | Found installed collection theforeman.foreman:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-03-25 22:07:08.161342 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-03-25 22:07:08.161610 | ubuntu-noble | Found installed collection arista.eos:12.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-03-25 22:07:08.162300 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-03-25 22:07:08.162541 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-03-25 22:07:08.163204 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-03-25 22:07:08.163453 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-03-25 22:07:08.163694 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-03-25 22:07:08.164027 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-03-25 22:07:08.164289 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-03-25 22:07:08.164533 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-03-25 22:07:08.166441 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-03-25 22:07:08.166679 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-03-25 22:07:08.166907 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-03-25 22:07:08.167198 | ubuntu-noble | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-03-25 22:07:08.169435 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-03-25 22:07:08.169757 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-03-25 22:07:08.170007 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-03-25 22:07:08.170257 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-03-25 22:07:08.170668 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-03-25 22:07:08.170928 | ubuntu-noble | Found installed collection vmware.vmware:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-03-25 22:07:08.171242 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-03-25 22:07:08.171468 | ubuntu-noble | Found installed collection ieisystem.inmanage:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-03-25 22:07:08.172246 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-03-25 22:07:08.172477 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-03-25 22:07:08.172704 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-03-25 22:07:08.173033 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-03-25 22:07:08.173281 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-03-25 22:07:08.173587 | ubuntu-noble | Found installed collection ansible.netcommon:8.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-03-25 22:07:08.173809 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-03-25 22:07:08.174123 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-03-25 22:07:08.174407 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-03-25 22:07:08.174731 | ubuntu-noble | Found installed collection ansible.windows:3.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-03-25 22:07:08.177826 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-03-25 22:07:08.178162 | ubuntu-noble | Found installed collection fortinet.fortios:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-03-25 22:07:08.179495 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-03-25 22:07:08.179728 | ubuntu-noble | Found installed collection amazon.aws:10.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-03-25 22:07:08.179953 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-03-25 22:07:08.180234 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-03-25 22:07:08.180459 | ubuntu-noble | Loading collection community.clickhouse from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/clickhouse 2026-03-25 22:07:08.180682 | ubuntu-noble | Found installed collection community.clickhouse:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/clickhouse' 2026-03-25 22:07:08.191258 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-03-25 22:07:08.191630 | ubuntu-noble | Found installed collection community.general:12.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-03-25 22:07:08.193031 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-03-25 22:07:08.193316 | ubuntu-noble | Found installed collection cisco.nxos:11.1.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-03-25 22:07:08.193639 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-03-25 22:07:08.193960 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-03-25 22:07:08.195455 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-03-25 22:07:08.195679 | ubuntu-noble | Found installed collection cisco.mso:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-03-25 22:07:08.196060 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-03-25 22:07:08.196335 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-03-25 22:07:08.196820 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-03-25 22:07:08.197144 | ubuntu-noble | Found installed collection community.crypto:3.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-03-25 22:07:08.197448 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-03-25 22:07:08.197717 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-03-25 22:07:08.197947 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-03-25 22:07:08.198287 | ubuntu-noble | Found installed collection community.routeros:3.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-03-25 22:07:08.203706 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-03-25 22:07:08.204021 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-03-25 22:07:08.204423 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-03-25 22:07:08.204808 | ubuntu-noble | Found installed collection ibm.storage_virtualize:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-03-25 22:07:08.205098 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-03-25 22:07:08.205288 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-03-25 22:07:08.207728 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-03-25 22:07:08.207949 | ubuntu-noble | Found installed collection ngine_io.cloudstack:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-03-25 22:07:08.208299 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-03-25 22:07:08.208610 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-03-25 22:07:08.208879 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-03-25 22:07:08.209188 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-03-25 22:07:08.209418 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-03-25 22:07:08.209752 | ubuntu-noble | Found installed collection cyberark.pas:1.0.39 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-03-25 22:07:08.210088 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-03-25 22:07:08.210325 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-03-25 22:07:08.210547 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-03-25 22:07:08.210771 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-03-25 22:07:08.212468 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-03-25 22:07:08.212714 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-03-25 22:07:08.212948 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-03-25 22:07:08.213252 | ubuntu-noble | Found installed collection community.mysql:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-03-25 22:07:08.213642 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-03-25 22:07:08.213873 | ubuntu-noble | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-03-25 22:07:08.214179 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-03-25 22:07:08.214469 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-03-25 22:07:08.214757 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-03-25 22:07:08.215617 | ubuntu-noble | Found installed collection netapp.storagegrid:21.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-03-25 22:07:08.215668 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-03-25 22:07:08.215676 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-03-25 22:07:08.217117 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-03-25 22:07:08.217141 | ubuntu-noble | Found installed collection hetzner.hcloud:6.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-03-25 22:07:08.218792 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-03-25 22:07:08.218810 | ubuntu-noble | Found installed collection cisco.meraki:2.23.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-03-25 22:07:08.219715 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-03-25 22:07:08.219732 | ubuntu-noble | Found installed collection cisco.iosxr:12.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-03-25 22:07:08.232166 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-03-25 22:07:08.232199 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-03-25 22:07:08.232209 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-03-25 22:07:08.233720 | ubuntu-noble | Found installed collection osism.commons:0.20260318.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-03-25 22:07:08.235498 | ubuntu-noble | Starting galaxy collection install process 2026-03-25 22:07:08.235529 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-03-25 22:07:08.294389 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-03-25 22:07:08.296089 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-03-25 22:07:08.308356 | ubuntu-noble | INFO [delegated > create] Executing 2026-03-25 22:07:08.310763 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-03-25 22:07:08.319246 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-03-25 22:07:08.319417 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-03-25 22:07:08.319527 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-03-25 22:07:08.327312 | ubuntu-noble | INFO [delegated > converge] Executing 2026-03-25 22:07:08.813747 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-03-25 22:07:08.813787 | ubuntu-noble | config file = None 2026-03-25 22:07:08.813792 | ubuntu-noble | configured module search path = 2026-03-25 22:07:08.813796 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-03-25 22:07:08.813800 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-03-25 22:07:08.813804 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-03-25 22:07:08.813807 | ubuntu-noble | python version = 3.12.3 (main, Mar 3 2026, 12:15:18) (/home/zuul/venv/bin/python3) 2026-03-25 22:07:08.813811 | ubuntu-noble | jinja version = 3.1.6 2026-03-25 22:07:08.813814 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2026-03-25 22:07:08.814037 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-03-25 22:07:08.814071 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-03-25 22:07:08.814075 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-03-25 22:07:08.814078 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-03-25 22:07:08.814082 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-03-25 22:07:08.814086 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-03-25 22:07:08.814089 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-03-25 22:07:08.814093 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-03-25 22:07:08.814097 | ubuntu-noble | 2026-03-25 22:07:08.814216 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-03-25 22:07:08.814222 | ubuntu-noble | MOLECULE_DEBUG: True 2026-03-25 22:07:08.814226 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-03-25 22:07:08.814229 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-03-25 22:07:08.814233 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-03-25 22:07:08.814236 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-03-25 22:07:08.814240 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-03-25 22:07:08.814243 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-03-25 22:07:08.814247 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-03-25 22:07:08.814251 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-03-25 22:07:08.814255 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-03-25 22:07:08.814258 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-03-25 22:07:08.814262 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-03-25 22:07:08.814265 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-03-25 22:07:08.814268 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-03-25 22:07:08.814272 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:07:08.814275 | ubuntu-noble | 2026-03-25 22:07:08.814371 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:07:09.034549 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2026-03-25 22:07:09.034887 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2026-03-25 22:07:09.035164 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2026-03-25 22:07:09.035339 | ubuntu-noble | 2026-03-25 22:07:09.203510 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-03-25 22:07:09.449067 | ubuntu-noble | 2026-03-25 22:07:09.449455 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-03-25 22:07:09.450487 | ubuntu-noble | 2026-03-25 22:07:09.450712 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-03-25 22:07:10.623177 | ubuntu-noble | ok: [molecule-auditd] 2026-03-25 22:07:10.623640 | ubuntu-noble | 2026-03-25 22:07:10.624127 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-03-25 22:07:10.656603 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-03-25 22:07:10.657495 | ubuntu-noble | 2026-03-25 22:07:10.657534 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-03-25 22:07:10.705843 | ubuntu-noble | included: auditd for molecule-auditd 2026-03-25 22:07:10.705941 | ubuntu-noble | 2026-03-25 22:07:10.705960 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-03-25 22:07:10.744676 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-03-25 22:07:10.744717 | ubuntu-noble | 2026-03-25 22:07:10.744724 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-03-25 22:07:15.625589 | ubuntu-noble | The following additional packages will be installed: 2026-03-25 22:07:15.625625 | ubuntu-noble | libauparse0t64 2026-03-25 22:07:15.625631 | ubuntu-noble | Suggested packages: 2026-03-25 22:07:15.625635 | ubuntu-noble | audispd-plugins 2026-03-25 22:07:15.625639 | ubuntu-noble | The following NEW packages will be installed: 2026-03-25 22:07:15.625644 | ubuntu-noble | auditd libauparse0t64 2026-03-25 22:07:15.625648 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded. 2026-03-25 22:07:15.628143 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1774476276, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (906 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 35437 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (906 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 35437 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-03-25 22:07:15.628313 | ubuntu-noble | 2026-03-25 22:07:15.628448 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-03-25 22:07:19.076309 | ubuntu-noble | The following NEW packages will be installed: 2026-03-25 22:07:19.079011 | ubuntu-noble | audispd-plugins 2026-03-25 22:07:19.079037 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded. 2026-03-25 22:07:19.079080 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1774476276, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (95.1 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 35533 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (95.1 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 35533 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-03-25 22:07:19.079090 | ubuntu-noble | 2026-03-25 22:07:19.079096 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-03-25 22:07:20.789602 | ubuntu-noble | --- before 2026-03-25 22:07:20.791531 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1871_1prnpu6/tmpzoqkt6ie/auditd.conf.j2 2026-03-25 22:07:20.791689 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-03-25 22:07:20.791764 | ubuntu-noble | +# 2026-03-25 22:07:20.791875 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-03-25 22:07:20.791972 | ubuntu-noble | +# 2026-03-25 22:07:20.792102 | ubuntu-noble | + 2026-03-25 22:07:20.792212 | ubuntu-noble | +local_events = yes 2026-03-25 22:07:20.792321 | ubuntu-noble | +write_logs = yes 2026-03-25 22:07:20.792427 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-03-25 22:07:20.794470 | ubuntu-noble | +log_group = adm 2026-03-25 22:07:20.794493 | ubuntu-noble | +log_format = RAW 2026-03-25 22:07:20.794497 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-03-25 22:07:20.794502 | ubuntu-noble | +freq = 50 2026-03-25 22:07:20.794506 | ubuntu-noble | +max_log_file = 8 2026-03-25 22:07:20.794510 | ubuntu-noble | +num_logs = 5 2026-03-25 22:07:20.794514 | ubuntu-noble | +priority_boost = 4 2026-03-25 22:07:20.794517 | ubuntu-noble | +disp_qos = lossy 2026-03-25 22:07:20.794521 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-03-25 22:07:20.794525 | ubuntu-noble | +name_format = NONE 2026-03-25 22:07:20.794529 | ubuntu-noble | +##name = mydomain 2026-03-25 22:07:20.794533 | ubuntu-noble | +max_log_file_action = ROTATE 2026-03-25 22:07:20.794537 | ubuntu-noble | +space_left = 12361 2026-03-25 22:07:20.794541 | ubuntu-noble | +space_left_action = email 2026-03-25 22:07:20.794544 | ubuntu-noble | +verify_email = yes 2026-03-25 22:07:20.794548 | ubuntu-noble | +action_mail_acct = root 2026-03-25 22:07:20.794552 | ubuntu-noble | +admin_space_left = 50 2026-03-25 22:07:20.794555 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-03-25 22:07:20.794559 | ubuntu-noble | +disk_full_action = SUSPEND 2026-03-25 22:07:20.794563 | ubuntu-noble | +disk_error_action = SUSPEND 2026-03-25 22:07:20.794570 | ubuntu-noble | +use_libwrap = yes 2026-03-25 22:07:20.794608 | ubuntu-noble | +##tcp_listen_port = 60 2026-03-25 22:07:20.794747 | ubuntu-noble | +tcp_listen_queue = 5 2026-03-25 22:07:20.794850 | ubuntu-noble | +tcp_max_per_addr = 1 2026-03-25 22:07:20.794953 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-03-25 22:07:20.795079 | ubuntu-noble | +tcp_client_max_idle = 0 2026-03-25 22:07:20.795185 | ubuntu-noble | +enable_krb5 = no 2026-03-25 22:07:20.795285 | ubuntu-noble | +krb5_principal = auditd 2026-03-25 22:07:20.795389 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-03-25 22:07:20.795491 | ubuntu-noble | +distribute_network = no 2026-03-25 22:07:20.795587 | ubuntu-noble | 2026-03-25 22:07:20.795737 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1774476439.1121154-2268-98444862763416/.source.conf", "state": "file", "uid": 0} 2026-03-25 22:07:20.795817 | ubuntu-noble | 2026-03-25 22:07:20.795924 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-03-25 22:07:21.436816 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-03-25 22:07:21.437107 | ubuntu-noble | 2026-03-25 22:07:21.437314 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-03-25 22:07:22.595330 | ubuntu-noble | --- before 2026-03-25 22:07:22.595440 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1871_1prnpu6/tmpc9tj2_ot/20-neo23x0.rules.j2 2026-03-25 22:07:22.595564 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-03-25 22:07:22.595685 | ubuntu-noble | +# ___ ___ __ __ 2026-03-25 22:07:22.595774 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-03-25 22:07:22.595872 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-03-25 22:07:22.595973 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-03-25 22:07:22.596469 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-03-25 22:07:22.596485 | ubuntu-noble | +# 2026-03-25 22:07:22.596492 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-03-25 22:07:22.596497 | ubuntu-noble | +# /etc/audit/audit.rules 2026-03-25 22:07:22.596506 | ubuntu-noble | +# 2026-03-25 22:07:22.598079 | ubuntu-noble | +# Compiled by Florian Roth 2026-03-25 22:07:22.598106 | ubuntu-noble | +# 2026-03-25 22:07:22.598112 | ubuntu-noble | +# Created : 2017/12/05 2026-03-25 22:07:22.598134 | ubuntu-noble | +# Modified : 2023/01/25 2026-03-25 22:07:22.598139 | ubuntu-noble | +# 2026-03-25 22:07:22.598145 | ubuntu-noble | +# Based on rules published here: 2026-03-25 22:07:22.598150 | ubuntu-noble | +# Gov.uk auditd rules 2026-03-25 22:07:22.598155 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-03-25 22:07:22.598160 | ubuntu-noble | +# CentOS 7 hardening 2026-03-25 22:07:22.598165 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-03-25 22:07:22.598170 | ubuntu-noble | +# Linux audit repo 2026-03-25 22:07:22.598199 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-03-25 22:07:22.598351 | ubuntu-noble | +# Auditd high performance linux auditing 2026-03-25 22:07:22.598509 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-03-25 22:07:22.598622 | ubuntu-noble | +# 2026-03-25 22:07:22.598723 | ubuntu-noble | +# Further rules 2026-03-25 22:07:22.598893 | ubuntu-noble | +# For PCI DSS compliance see: 2026-03-25 22:07:22.599038 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-03-25 22:07:22.599198 | ubuntu-noble | +# For NISPOM compliance see: 2026-03-25 22:07:22.599354 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-03-25 22:07:22.599458 | ubuntu-noble | + 2026-03-25 22:07:22.599566 | ubuntu-noble | +# Remove any existing rules 2026-03-25 22:07:22.599694 | ubuntu-noble | +-D 2026-03-25 22:07:22.599793 | ubuntu-noble | + 2026-03-25 22:07:22.599892 | ubuntu-noble | +# Buffer Size 2026-03-25 22:07:22.599998 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-03-25 22:07:22.600111 | ubuntu-noble | +-b 8192 2026-03-25 22:07:22.600207 | ubuntu-noble | + 2026-03-25 22:07:22.600308 | ubuntu-noble | +# Failure Mode 2026-03-25 22:07:22.600419 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-03-25 22:07:22.600515 | ubuntu-noble | +-f 1 2026-03-25 22:07:22.601652 | ubuntu-noble | + 2026-03-25 22:07:22.601832 | ubuntu-noble | +# Ignore errors 2026-03-25 22:07:22.601951 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-03-25 22:07:22.602072 | ubuntu-noble | +-i 2026-03-25 22:07:22.602177 | ubuntu-noble | + 2026-03-25 22:07:22.602285 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-03-25 22:07:22.602382 | ubuntu-noble | + 2026-03-25 22:07:22.602488 | ubuntu-noble | +## Audit the audit logs 2026-03-25 22:07:22.602612 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-03-25 22:07:22.602735 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-03-25 22:07:22.602837 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-03-25 22:07:22.602936 | ubuntu-noble | + 2026-03-25 22:07:22.603056 | ubuntu-noble | +## Auditd configuration 2026-03-25 22:07:22.603159 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-03-25 22:07:22.603265 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-03-25 22:07:22.603370 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-03-25 22:07:22.603472 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-03-25 22:07:22.603573 | ubuntu-noble | + 2026-03-25 22:07:22.603690 | ubuntu-noble | +## Monitor for use of audit management tools 2026-03-25 22:07:22.603796 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-03-25 22:07:22.603896 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-03-25 22:07:22.604000 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-03-25 22:07:22.604117 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-03-25 22:07:22.604214 | ubuntu-noble | + 2026-03-25 22:07:22.604318 | ubuntu-noble | +## Access to all audit trails 2026-03-25 22:07:22.604415 | ubuntu-noble | + 2026-03-25 22:07:22.604525 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-03-25 22:07:22.604645 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-03-25 22:07:22.604746 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-03-25 22:07:22.604855 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-03-25 22:07:22.604960 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-03-25 22:07:22.605073 | ubuntu-noble | + 2026-03-25 22:07:22.605174 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-03-25 22:07:22.605270 | ubuntu-noble | + 2026-03-25 22:07:22.605376 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-03-25 22:07:22.605475 | ubuntu-noble | + 2026-03-25 22:07:22.605580 | ubuntu-noble | +## Ignore SELinux AVC records 2026-03-25 22:07:22.605697 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-03-25 22:07:22.605792 | ubuntu-noble | + 2026-03-25 22:07:22.607241 | ubuntu-noble | +## Ignore current working directory records 2026-03-25 22:07:22.607262 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-03-25 22:07:22.607267 | ubuntu-noble | + 2026-03-25 22:07:22.607271 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-03-25 22:07:22.607274 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-03-25 22:07:22.607278 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-03-25 22:07:22.607281 | ubuntu-noble | + 2026-03-25 22:07:22.607285 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-03-25 22:07:22.607288 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-03-25 22:07:22.607292 | ubuntu-noble | + 2026-03-25 22:07:22.607295 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-03-25 22:07:22.607299 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-03-25 22:07:22.607302 | ubuntu-noble | + 2026-03-25 22:07:22.607306 | ubuntu-noble | +## Open VM Tools 2026-03-25 22:07:22.607337 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-03-25 22:07:22.607433 | ubuntu-noble | + 2026-03-25 22:07:22.607541 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-03-25 22:07:22.607658 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-03-25 22:07:22.607764 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-03-25 22:07:22.607861 | ubuntu-noble | + 2026-03-25 22:07:22.607961 | ubuntu-noble | +## FileBeat 2026-03-25 22:07:22.608083 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-03-25 22:07:22.608182 | ubuntu-noble | + 2026-03-25 22:07:22.608284 | ubuntu-noble | +## More information on how to filter events 2026-03-25 22:07:22.608483 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-03-25 22:07:22.608584 | ubuntu-noble | + 2026-03-25 22:07:22.608714 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-03-25 22:07:22.608811 | ubuntu-noble | + 2026-03-25 22:07:22.608914 | ubuntu-noble | +## Kernel parameters 2026-03-25 22:07:22.609020 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-03-25 22:07:22.609175 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-03-25 22:07:22.609273 | ubuntu-noble | + 2026-03-25 22:07:22.609374 | ubuntu-noble | +## Kernel module loading and unloading 2026-03-25 22:07:22.609479 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-03-25 22:07:22.609629 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-03-25 22:07:22.609702 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-03-25 22:07:22.609813 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-03-25 22:07:22.609911 | ubuntu-noble | + 2026-03-25 22:07:22.610015 | ubuntu-noble | +## Modprobe configuration 2026-03-25 22:07:22.610149 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-03-25 22:07:22.610254 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-03-25 22:07:22.610350 | ubuntu-noble | + 2026-03-25 22:07:22.610456 | ubuntu-noble | +## KExec usage (all actions) 2026-03-25 22:07:22.610565 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-03-25 22:07:22.610671 | ubuntu-noble | + 2026-03-25 22:07:22.610774 | ubuntu-noble | +## Special files 2026-03-25 22:07:22.610878 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-03-25 22:07:22.610976 | ubuntu-noble | + 2026-03-25 22:07:22.611100 | ubuntu-noble | +## Mount operations (only attributable) 2026-03-25 22:07:22.611208 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-03-25 22:07:22.611304 | ubuntu-noble | + 2026-03-25 22:07:22.611435 | ubuntu-noble | +### NFS mount 2026-03-25 22:07:22.611524 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.611658 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.611754 | ubuntu-noble | + 2026-03-25 22:07:22.611858 | ubuntu-noble | +## Change swap (only attributable) 2026-03-25 22:07:22.611964 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-03-25 22:07:22.612078 | ubuntu-noble | + 2026-03-25 22:07:22.612205 | ubuntu-noble | +## Time 2026-03-25 22:07:22.612303 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-03-25 22:07:22.612405 | ubuntu-noble | +### Local time zone 2026-03-25 22:07:22.612506 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-03-25 22:07:22.612614 | ubuntu-noble | + 2026-03-25 22:07:22.612713 | ubuntu-noble | +## Stunnel 2026-03-25 22:07:22.612815 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-03-25 22:07:22.612914 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-03-25 22:07:22.613012 | ubuntu-noble | + 2026-03-25 22:07:22.613127 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-03-25 22:07:22.613234 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-03-25 22:07:22.613337 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-03-25 22:07:22.613436 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-03-25 22:07:22.613540 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-03-25 22:07:22.613657 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-03-25 22:07:22.615074 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-03-25 22:07:22.615095 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-03-25 22:07:22.615099 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-03-25 22:07:22.615103 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-03-25 22:07:22.615106 | ubuntu-noble | + 2026-03-25 22:07:22.615110 | ubuntu-noble | +## User, group, password databases 2026-03-25 22:07:22.615115 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-03-25 22:07:22.615119 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-03-25 22:07:22.615123 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-03-25 22:07:22.615126 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-03-25 22:07:22.615130 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-03-25 22:07:22.615133 | ubuntu-noble | + 2026-03-25 22:07:22.615136 | ubuntu-noble | +## Sudoers file changes 2026-03-25 22:07:22.615140 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-03-25 22:07:22.615181 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-03-25 22:07:22.615260 | ubuntu-noble | + 2026-03-25 22:07:22.615361 | ubuntu-noble | +## Passwd 2026-03-25 22:07:22.615465 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-03-25 22:07:22.615562 | ubuntu-noble | + 2026-03-25 22:07:22.615675 | ubuntu-noble | +## Tools to change group identifiers 2026-03-25 22:07:22.615781 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-03-25 22:07:22.615886 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-03-25 22:07:22.615990 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-03-25 22:07:22.616125 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-03-25 22:07:22.616253 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-03-25 22:07:22.616349 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-03-25 22:07:22.616455 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-03-25 22:07:22.616551 | ubuntu-noble | + 2026-03-25 22:07:22.616664 | ubuntu-noble | +## Login configuration and information 2026-03-25 22:07:22.616767 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-03-25 22:07:22.616868 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-03-25 22:07:22.616973 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-03-25 22:07:22.617089 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-03-25 22:07:22.617193 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-03-25 22:07:22.617290 | ubuntu-noble | + 2026-03-25 22:07:22.617395 | ubuntu-noble | +## Network Environment 2026-03-25 22:07:22.617495 | ubuntu-noble | +### Changes to hostname 2026-03-25 22:07:22.617641 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-03-25 22:07:22.617721 | ubuntu-noble | + 2026-03-25 22:07:22.617823 | ubuntu-noble | +### Detect Remote Shell Use 2026-03-25 22:07:22.617941 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-03-25 22:07:22.618064 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-03-25 22:07:22.618163 | ubuntu-noble | + 2026-03-25 22:07:22.618263 | ubuntu-noble | +### Successful IPv4 Connections 2026-03-25 22:07:22.618372 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-03-25 22:07:22.618468 | ubuntu-noble | + 2026-03-25 22:07:22.618568 | ubuntu-noble | +### Successful IPv6 Connections 2026-03-25 22:07:22.618684 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-03-25 22:07:22.618779 | ubuntu-noble | + 2026-03-25 22:07:22.618879 | ubuntu-noble | +### Changes to other files 2026-03-25 22:07:22.618984 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-03-25 22:07:22.619107 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-03-25 22:07:22.619213 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-03-25 22:07:22.619313 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-03-25 22:07:22.619419 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-03-25 22:07:22.619518 | ubuntu-noble | + 2026-03-25 22:07:22.619794 | ubuntu-noble | +### Changes to issue 2026-03-25 22:07:22.619880 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-03-25 22:07:22.619896 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-03-25 22:07:22.619942 | ubuntu-noble | + 2026-03-25 22:07:22.620093 | ubuntu-noble | +## System startup scripts 2026-03-25 22:07:22.620174 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-03-25 22:07:22.620272 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-03-25 22:07:22.620392 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-03-25 22:07:22.620478 | ubuntu-noble | + 2026-03-25 22:07:22.620583 | ubuntu-noble | +## Library search paths 2026-03-25 22:07:22.621126 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-03-25 22:07:22.621139 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-03-25 22:07:22.621150 | ubuntu-noble | + 2026-03-25 22:07:22.621160 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-03-25 22:07:22.621170 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-03-25 22:07:22.621184 | ubuntu-noble | + 2026-03-25 22:07:22.621275 | ubuntu-noble | +## Pam configuration 2026-03-25 22:07:22.621378 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-03-25 22:07:22.621480 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-03-25 22:07:22.621659 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-03-25 22:07:22.621683 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-03-25 22:07:22.622962 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-03-25 22:07:22.623005 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-03-25 22:07:22.623015 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-03-25 22:07:22.623024 | ubuntu-noble | + 2026-03-25 22:07:22.623034 | ubuntu-noble | +## Mail configuration 2026-03-25 22:07:22.623065 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-03-25 22:07:22.623076 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-03-25 22:07:22.623086 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-03-25 22:07:22.623095 | ubuntu-noble | + 2026-03-25 22:07:22.623103 | ubuntu-noble | +## SSH configuration 2026-03-25 22:07:22.623112 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-03-25 22:07:22.623120 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-03-25 22:07:22.623136 | ubuntu-noble | + 2026-03-25 22:07:22.623145 | ubuntu-noble | +## root ssh key tampering 2026-03-25 22:07:22.623158 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-03-25 22:07:22.623263 | ubuntu-noble | + 2026-03-25 22:07:22.623359 | ubuntu-noble | +# Systemd 2026-03-25 22:07:22.623460 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-03-25 22:07:22.623561 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-03-25 22:07:22.623683 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-03-25 22:07:22.623768 | ubuntu-noble | + 2026-03-25 22:07:22.623875 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-03-25 22:07:22.623979 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-03-25 22:07:22.624100 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-03-25 22:07:22.624206 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-03-25 22:07:22.624336 | ubuntu-noble | + 2026-03-25 22:07:22.624408 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-03-25 22:07:22.624512 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-03-25 22:07:22.624628 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-03-25 22:07:22.624722 | ubuntu-noble | + 2026-03-25 22:07:22.624830 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-03-25 22:07:22.624935 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-03-25 22:07:22.625031 | ubuntu-noble | + 2026-03-25 22:07:22.625150 | ubuntu-noble | +## Critical elements access failures 2026-03-25 22:07:22.625255 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625363 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625458 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625568 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625696 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625801 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.625907 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.626016 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-03-25 22:07:22.626577 | ubuntu-noble | + 2026-03-25 22:07:22.626670 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-03-25 22:07:22.626680 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-03-25 22:07:22.626690 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-03-25 22:07:22.626699 | ubuntu-noble | + 2026-03-25 22:07:22.626714 | ubuntu-noble | +## Power state 2026-03-25 22:07:22.626723 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-03-25 22:07:22.626808 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-03-25 22:07:22.626907 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-03-25 22:07:22.627008 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-03-25 22:07:22.627122 | ubuntu-noble | + 2026-03-25 22:07:22.627217 | ubuntu-noble | +## Session initiation information 2026-03-25 22:07:22.627320 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-03-25 22:07:22.627426 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-03-25 22:07:22.627666 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-03-25 22:07:22.627679 | ubuntu-noble | + 2026-03-25 22:07:22.627730 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-03-25 22:07:22.627841 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629083 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629114 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629122 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629137 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629144 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629150 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629156 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629164 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629174 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629184 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629195 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629211 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-03-25 22:07:22.629221 | ubuntu-noble | + 2026-03-25 22:07:22.629316 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-03-25 22:07:22.629405 | ubuntu-noble | + 2026-03-25 22:07:22.629505 | ubuntu-noble | +## Reconnaissance 2026-03-25 22:07:22.629623 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-03-25 22:07:22.629724 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-03-25 22:07:22.629828 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-03-25 22:07:22.629928 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-03-25 22:07:22.630030 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-03-25 22:07:22.630148 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-03-25 22:07:22.630248 | ubuntu-noble | + 2026-03-25 22:07:22.630388 | ubuntu-noble | +## Suspicious activity 2026-03-25 22:07:22.630452 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-03-25 22:07:22.630554 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-03-25 22:07:22.630670 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-03-25 22:07:22.630775 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-03-25 22:07:22.630879 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-03-25 22:07:22.630979 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-03-25 22:07:22.631097 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-03-25 22:07:22.631200 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-03-25 22:07:22.631311 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-03-25 22:07:22.631407 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-03-25 22:07:22.631509 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-03-25 22:07:22.631621 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-03-25 22:07:22.631726 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-03-25 22:07:22.631831 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-03-25 22:07:22.631935 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-03-25 22:07:22.632060 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-03-25 22:07:22.632169 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-03-25 22:07:22.632269 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-03-25 22:07:22.632373 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-03-25 22:07:22.632474 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-03-25 22:07:22.632580 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-03-25 22:07:22.632706 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-03-25 22:07:22.632808 | ubuntu-noble | + 2026-03-25 22:07:22.632905 | ubuntu-noble | +## sssd 2026-03-25 22:07:22.633021 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.633146 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.633259 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.633371 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.633479 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.633574 | ubuntu-noble | + 2026-03-25 22:07:22.633704 | ubuntu-noble | +## T1002 Data Compressed 2026-03-25 22:07:22.633782 | ubuntu-noble | + 2026-03-25 22:07:22.633888 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-03-25 22:07:22.633992 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-03-25 22:07:22.634112 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-03-25 22:07:22.634219 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-03-25 22:07:22.634320 | ubuntu-noble | + 2026-03-25 22:07:22.634423 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-03-25 22:07:22.634524 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-03-25 22:07:22.634630 | ubuntu-noble | + 2026-03-25 22:07:22.634737 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-03-25 22:07:22.634840 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-03-25 22:07:22.634937 | ubuntu-noble | + 2026-03-25 22:07:22.635066 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-03-25 22:07:22.635900 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-03-25 22:07:22.635920 | ubuntu-noble | + 2026-03-25 22:07:22.635926 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-03-25 22:07:22.635932 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-03-25 22:07:22.635938 | ubuntu-noble | + 2026-03-25 22:07:22.635943 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-03-25 22:07:22.635948 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-03-25 22:07:22.635953 | ubuntu-noble | + 2026-03-25 22:07:22.635961 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-03-25 22:07:22.636036 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-03-25 22:07:22.636150 | ubuntu-noble | + 2026-03-25 22:07:22.636249 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-03-25 22:07:22.636365 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-03-25 22:07:22.636460 | ubuntu-noble | + 2026-03-25 22:07:22.636571 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-03-25 22:07:22.636696 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-03-25 22:07:22.636871 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-03-25 22:07:22.636981 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-03-25 22:07:22.637091 | ubuntu-noble | + 2026-03-25 22:07:22.637193 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-03-25 22:07:22.637299 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-03-25 22:07:22.637396 | ubuntu-noble | + 2026-03-25 22:07:22.637497 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-03-25 22:07:22.637650 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-03-25 22:07:22.637715 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-03-25 22:07:22.637812 | ubuntu-noble | + 2026-03-25 22:07:22.637916 | ubuntu-noble | +## Sbin suspicious activity 2026-03-25 22:07:22.638035 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-03-25 22:07:22.638138 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-03-25 22:07:22.638241 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-03-25 22:07:22.638343 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-03-25 22:07:22.638445 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-03-25 22:07:22.638545 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-03-25 22:07:22.638673 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-03-25 22:07:22.638779 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-03-25 22:07:22.638882 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-03-25 22:07:22.638984 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-03-25 22:07:22.639093 | ubuntu-noble | + 2026-03-25 22:07:22.641081 | ubuntu-noble | +### kde4 2026-03-25 22:07:22.641108 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.641114 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-03-25 22:07:22.641118 | ubuntu-noble | + 2026-03-25 22:07:22.641123 | ubuntu-noble | +## dbus-send invocation 2026-03-25 22:07:22.641128 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-03-25 22:07:22.641132 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-03-25 22:07:22.641137 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-03-25 22:07:22.641142 | ubuntu-noble | + 2026-03-25 22:07:22.641146 | ubuntu-noble | +## pkexec invocation 2026-03-25 22:07:22.641150 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-03-25 22:07:22.641154 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-03-25 22:07:22.641159 | ubuntu-noble | + 2026-03-25 22:07:22.641163 | ubuntu-noble | +## Suspicious shells 2026-03-25 22:07:22.641167 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-03-25 22:07:22.641171 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-03-25 22:07:22.641176 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-03-25 22:07:22.641180 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-03-25 22:07:22.641184 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-03-25 22:07:22.641188 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-03-25 22:07:22.641196 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-03-25 22:07:22.641245 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-03-25 22:07:22.641348 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-03-25 22:07:22.641442 | ubuntu-noble | + 2026-03-25 22:07:22.641543 | ubuntu-noble | +# Web Server Actvity 2026-03-25 22:07:22.641678 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-03-25 22:07:22.641785 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-03-25 22:07:22.641878 | ubuntu-noble | + 2026-03-25 22:07:22.641985 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-03-25 22:07:22.642101 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-03-25 22:07:22.642206 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-03-25 22:07:22.642328 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-03-25 22:07:22.642406 | ubuntu-noble | + 2026-03-25 22:07:22.642510 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-03-25 22:07:22.642624 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-03-25 22:07:22.642730 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-03-25 22:07:22.642827 | ubuntu-noble | + 2026-03-25 22:07:22.642930 | ubuntu-noble | +## Shell/profile configurations 2026-03-25 22:07:22.643062 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-03-25 22:07:22.643162 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-03-25 22:07:22.643265 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-03-25 22:07:22.643381 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-03-25 22:07:22.643471 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-03-25 22:07:22.643578 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-03-25 22:07:22.643686 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-03-25 22:07:22.643790 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-03-25 22:07:22.643886 | ubuntu-noble | + 2026-03-25 22:07:22.643989 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-03-25 22:07:22.644105 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-03-25 22:07:22.644205 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-03-25 22:07:22.644310 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-03-25 22:07:22.644406 | ubuntu-noble | + 2026-03-25 22:07:22.644513 | ubuntu-noble | +## Injection 2026-03-25 22:07:22.644644 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-03-25 22:07:22.644742 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-03-25 22:07:22.644848 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-03-25 22:07:22.644954 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-03-25 22:07:22.645073 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-03-25 22:07:22.645179 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-03-25 22:07:22.645282 | ubuntu-noble | + 2026-03-25 22:07:22.645379 | ubuntu-noble | +## Anonymous File Creation 2026-03-25 22:07:22.645481 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-03-25 22:07:22.645600 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-03-25 22:07:22.645712 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-03-25 22:07:22.645814 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-03-25 22:07:22.645904 | ubuntu-noble | + 2026-03-25 22:07:22.646010 | ubuntu-noble | +## Privilege Abuse 2026-03-25 22:07:22.646128 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-03-25 22:07:22.646235 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-03-25 22:07:22.646331 | ubuntu-noble | + 2026-03-25 22:07:22.646434 | ubuntu-noble | +# Socket Creations 2026-03-25 22:07:22.646538 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-03-25 22:07:22.646642 | ubuntu-noble | + 2026-03-25 22:07:22.646751 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-03-25 22:07:22.646855 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-03-25 22:07:22.646951 | ubuntu-noble | + 2026-03-25 22:07:22.647074 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-03-25 22:07:22.647180 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-03-25 22:07:22.647274 | ubuntu-noble | + 2026-03-25 22:07:22.647377 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-03-25 22:07:22.647472 | ubuntu-noble | + 2026-03-25 22:07:22.647574 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-03-25 22:07:22.647698 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-03-25 22:07:22.647806 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-03-25 22:07:22.647901 | ubuntu-noble | + 2026-03-25 22:07:22.648005 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-03-25 22:07:22.648125 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-03-25 22:07:22.648221 | ubuntu-noble | + 2026-03-25 22:07:22.648325 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-03-25 22:07:22.648427 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-03-25 22:07:22.648533 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-03-25 22:07:22.648684 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-03-25 22:07:22.648768 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-03-25 22:07:22.648881 | ubuntu-noble | + 2026-03-25 22:07:22.648973 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-03-25 22:07:22.649213 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-03-25 22:07:22.649225 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-03-25 22:07:22.649297 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-03-25 22:07:22.649398 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-03-25 22:07:22.649503 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-03-25 22:07:22.649626 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-03-25 22:07:22.649733 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-03-25 22:07:22.649829 | ubuntu-noble | + 2026-03-25 22:07:22.649947 | ubuntu-noble | +# PIP(3) (Python installs) 2026-03-25 22:07:22.650054 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652181 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652213 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652217 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652221 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652224 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652228 | ubuntu-noble | + 2026-03-25 22:07:22.652232 | ubuntu-noble | +# npm 2026-03-25 22:07:22.652235 | ubuntu-noble | +## T1072 third party software 2026-03-25 22:07:22.652239 | ubuntu-noble | +## https://www.npmjs.com 2026-03-25 22:07:22.652243 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-03-25 22:07:22.652250 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652371 | ubuntu-noble | + 2026-03-25 22:07:22.652469 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-03-25 22:07:22.652574 | ubuntu-noble | +## T1072 third party software 2026-03-25 22:07:22.652697 | ubuntu-noble | +## https://www.cpan.org 2026-03-25 22:07:22.652794 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-03-25 22:07:22.652889 | ubuntu-noble | + 2026-03-25 22:07:22.653002 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-03-25 22:07:22.654016 | ubuntu-noble | +## T1072 third party software 2026-03-25 22:07:22.654059 | ubuntu-noble | +## https://rubygems.org 2026-03-25 22:07:22.654064 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-03-25 22:07:22.654068 | ubuntu-noble | + 2026-03-25 22:07:22.654072 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-03-25 22:07:22.654075 | ubuntu-noble | +## T1072 third party software 2026-03-25 22:07:22.654079 | ubuntu-noble | +## https://luarocks.org 2026-03-25 22:07:22.654082 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-03-25 22:07:22.654085 | ubuntu-noble | + 2026-03-25 22:07:22.654093 | ubuntu-noble | +# Pacman (Arch Linux) 2026-03-25 22:07:22.654180 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-03-25 22:07:22.654282 | ubuntu-noble | +## T1072 third party software 2026-03-25 22:07:22.654389 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-03-25 22:07:22.654772 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-03-25 22:07:22.654893 | ubuntu-noble | + 2026-03-25 22:07:22.655001 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-03-25 22:07:22.655136 | ubuntu-noble | + 2026-03-25 22:07:22.655240 | ubuntu-noble | +## GDS specific secrets 2026-03-25 22:07:22.655347 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-03-25 22:07:22.655441 | ubuntu-noble | + 2026-03-25 22:07:22.655547 | ubuntu-noble | +## IBM Bigfix BESClient 2026-03-25 22:07:22.655696 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-03-25 22:07:22.655788 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-03-25 22:07:22.655889 | ubuntu-noble | + 2026-03-25 22:07:22.655994 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-03-25 22:07:22.656239 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-03-25 22:07:22.656252 | ubuntu-noble | + 2026-03-25 22:07:22.656326 | ubuntu-noble | +## Salt 2026-03-25 22:07:22.656430 | ubuntu-noble | +## https://saltproject.io/ 2026-03-25 22:07:22.656536 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-03-25 22:07:22.656648 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-03-25 22:07:22.656751 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-03-25 22:07:22.656848 | ubuntu-noble | + 2026-03-25 22:07:22.656949 | ubuntu-noble | +## Otter 2026-03-25 22:07:22.657061 | ubuntu-noble | +## https://inedo.com/otter 2026-03-25 22:07:22.658652 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-03-25 22:07:22.658675 | ubuntu-noble | + 2026-03-25 22:07:22.658679 | ubuntu-noble | +## T1081 Credentials In Files 2026-03-25 22:07:22.658683 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-03-25 22:07:22.658686 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-03-25 22:07:22.658690 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-03-25 22:07:22.658693 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.658720 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-03-25 22:07:22.658846 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-03-25 22:07:22.658944 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-03-25 22:07:22.659065 | ubuntu-noble | + 2026-03-25 22:07:22.659173 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-03-25 22:07:22.659268 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-03-25 22:07:22.659367 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.659479 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-03-25 22:07:22.659569 | ubuntu-noble | + 2026-03-25 22:07:22.659690 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-03-25 22:07:22.659803 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-03-25 22:07:22.659897 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.660000 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-03-25 22:07:22.660316 | ubuntu-noble | + 2026-03-25 22:07:22.660328 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-03-25 22:07:22.660334 | ubuntu-noble | + 2026-03-25 22:07:22.660435 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-03-25 22:07:22.660534 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.660666 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-03-25 22:07:22.660753 | ubuntu-noble | + 2026-03-25 22:07:22.660857 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-03-25 22:07:22.660961 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-03-25 22:07:22.661093 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.661197 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-03-25 22:07:22.661295 | ubuntu-noble | + 2026-03-25 22:07:22.661397 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-03-25 22:07:22.661501 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-03-25 22:07:22.661613 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.661720 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-03-25 22:07:22.661815 | ubuntu-noble | + 2026-03-25 22:07:22.661921 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-03-25 22:07:22.662026 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-03-25 22:07:22.663853 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.663879 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-03-25 22:07:22.663884 | ubuntu-noble | + 2026-03-25 22:07:22.663887 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-03-25 22:07:22.663891 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-03-25 22:07:22.663894 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.663897 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-03-25 22:07:22.663901 | ubuntu-noble | + 2026-03-25 22:07:22.663904 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-03-25 22:07:22.663907 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-03-25 22:07:22.663911 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.663914 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-03-25 22:07:22.663917 | ubuntu-noble | + 2026-03-25 22:07:22.663921 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-03-25 22:07:22.663928 | ubuntu-noble | +### https://beyondgrep.com 2026-03-25 22:07:22.664107 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-03-25 22:07:22.664158 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-03-25 22:07:22.664264 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-03-25 22:07:22.664362 | ubuntu-noble | +### macOS 2026-03-25 22:07:22.664467 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-03-25 22:07:22.664565 | ubuntu-noble | + 2026-03-25 22:07:22.664677 | ubuntu-noble | +## Docker 2026-03-25 22:07:22.664780 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-03-25 22:07:22.664881 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-03-25 22:07:22.664985 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-03-25 22:07:22.665271 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-03-25 22:07:22.665281 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-03-25 22:07:22.665319 | ubuntu-noble | +-w /etc/docker -k docker 2026-03-25 22:07:22.665425 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-03-25 22:07:22.665523 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-03-25 22:07:22.665638 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-03-25 22:07:22.665744 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-03-25 22:07:22.665840 | ubuntu-noble | + 2026-03-25 22:07:22.665941 | ubuntu-noble | +## Virtualization stuff 2026-03-25 22:07:22.666069 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-03-25 22:07:22.667499 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-03-25 22:07:22.667519 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-03-25 22:07:22.667523 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-03-25 22:07:22.667527 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-03-25 22:07:22.667531 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-03-25 22:07:22.667534 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-03-25 22:07:22.667538 | ubuntu-noble | + 2026-03-25 22:07:22.667541 | ubuntu-noble | +#### VirtualBox on macOS 2026-03-25 22:07:22.667545 | ubuntu-noble | + 2026-03-25 22:07:22.667548 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-03-25 22:07:22.667558 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-03-25 22:07:22.667561 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-03-25 22:07:22.667568 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-03-25 22:07:22.667679 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-03-25 22:07:22.667759 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-03-25 22:07:22.667863 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-03-25 22:07:22.667967 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-03-25 22:07:22.668541 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-03-25 22:07:22.668553 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-03-25 22:07:22.668639 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-03-25 22:07:22.668742 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-03-25 22:07:22.668846 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-03-25 22:07:22.668952 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-03-25 22:07:22.669078 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-03-25 22:07:22.669183 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-03-25 22:07:22.669297 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-03-25 22:07:22.669398 | ubuntu-noble | + 2026-03-25 22:07:22.669503 | ubuntu-noble | +### Parallels Desktop on macOS 2026-03-25 22:07:22.669634 | ubuntu-noble | + 2026-03-25 22:07:22.669741 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-03-25 22:07:22.669846 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-03-25 22:07:22.669949 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-03-25 22:07:22.670075 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-03-25 22:07:22.670963 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-03-25 22:07:22.670980 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-03-25 22:07:22.670994 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-03-25 22:07:22.670997 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-03-25 22:07:22.671001 | ubuntu-noble | + 2026-03-25 22:07:22.671005 | ubuntu-noble | +### qemu on macOS 2026-03-25 22:07:22.671009 | ubuntu-noble | + 2026-03-25 22:07:22.671015 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-03-25 22:07:22.671101 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-03-25 22:07:22.671205 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-03-25 22:07:22.671300 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-03-25 22:07:22.671640 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-03-25 22:07:22.671749 | ubuntu-noble | + 2026-03-25 22:07:22.671852 | ubuntu-noble | +## Kubelet 2026-03-25 22:07:22.671955 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-03-25 22:07:22.672078 | ubuntu-noble | + 2026-03-25 22:07:22.672184 | ubuntu-noble | +# ipc system call 2026-03-25 22:07:22.672289 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-03-25 22:07:22.672389 | ubuntu-noble | + 2026-03-25 22:07:22.672490 | ubuntu-noble | +## msgctl 2026-03-25 22:07:22.672657 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-03-25 22:07:22.672713 | ubuntu-noble | +## msgget 2026-03-25 22:07:22.672825 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-03-25 22:07:22.672929 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-03-25 22:07:22.673037 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-03-25 22:07:22.673187 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-03-25 22:07:22.673290 | ubuntu-noble | + 2026-03-25 22:07:22.673386 | ubuntu-noble | +## semctl 2026-03-25 22:07:22.673494 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-03-25 22:07:22.673635 | ubuntu-noble | +## semget 2026-03-25 22:07:22.673732 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-03-25 22:07:22.673835 | ubuntu-noble | +## semop 2026-03-25 22:07:22.673940 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-03-25 22:07:22.674070 | ubuntu-noble | +## semtimedop 2026-03-25 22:07:22.674180 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-03-25 22:07:22.674287 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-03-25 22:07:22.674392 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-03-25 22:07:22.674498 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-03-25 22:07:22.674639 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-03-25 22:07:22.674728 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-03-25 22:07:22.674825 | ubuntu-noble | + 2026-03-25 22:07:22.674927 | ubuntu-noble | +## shmctl 2026-03-25 22:07:22.675037 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-03-25 22:07:22.675180 | ubuntu-noble | +## shmget 2026-03-25 22:07:22.675293 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-03-25 22:07:22.675394 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-03-25 22:07:22.677112 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-03-25 22:07:22.677134 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-03-25 22:07:22.677138 | ubuntu-noble | + 2026-03-25 22:07:22.677142 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-03-25 22:07:22.677146 | ubuntu-noble | + 2026-03-25 22:07:22.677149 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-03-25 22:07:22.677152 | ubuntu-noble | + 2026-03-25 22:07:22.677156 | ubuntu-noble | +## Common Shells 2026-03-25 22:07:22.677159 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-03-25 22:07:22.677163 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-03-25 22:07:22.677167 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-03-25 22:07:22.677170 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-03-25 22:07:22.677174 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-03-25 22:07:22.677177 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-03-25 22:07:22.677181 | ubuntu-noble | + 2026-03-25 22:07:22.677184 | ubuntu-noble | +## Root command executions 2026-03-25 22:07:22.677208 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-03-25 22:07:22.677316 | ubuntu-noble | + 2026-03-25 22:07:22.677420 | ubuntu-noble | +## File Deletion Events by User 2026-03-25 22:07:22.677531 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-03-25 22:07:22.677652 | ubuntu-noble | + 2026-03-25 22:07:22.677757 | ubuntu-noble | +## File Access 2026-03-25 22:07:22.677860 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-03-25 22:07:22.677972 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-03-25 22:07:22.678114 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-03-25 22:07:22.678211 | ubuntu-noble | + 2026-03-25 22:07:22.678316 | ubuntu-noble | +### Unsuccessful Creation 2026-03-25 22:07:22.678427 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-03-25 22:07:22.678536 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-03-25 22:07:22.678644 | ubuntu-noble | + 2026-03-25 22:07:22.678751 | ubuntu-noble | +### Unsuccessful Modification 2026-03-25 22:07:22.678861 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-03-25 22:07:22.678970 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-03-25 22:07:22.679299 | ubuntu-noble | + 2026-03-25 22:07:22.679310 | ubuntu-noble | +## 32bit API Exploitation 2026-03-25 22:07:22.679315 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-03-25 22:07:22.679409 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-03-25 22:07:22.679508 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-03-25 22:07:22.679618 | ubuntu-noble | +### bit API. 2026-03-25 22:07:22.679722 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-03-25 22:07:22.679821 | ubuntu-noble | + 2026-03-25 22:07:22.679926 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-03-25 22:07:22.680023 | ubuntu-noble | + 2026-03-25 22:07:22.680138 | ubuntu-noble | +##-e 2 2026-03-25 22:07:22.680232 | ubuntu-noble | 2026-03-25 22:07:22.680486 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1774476441.4671144-2346-152887663607162/.source.rules", "state": "file", "uid": 0} 2026-03-25 22:07:22.680572 | ubuntu-noble | 2026-03-25 22:07:22.680707 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-03-25 22:07:23.648625 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Wed 2026-03-25 22:07:15 UTC", "ActiveEnterTimestampMonotonic": "477121066", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Wed 2026-03-25 22:07:14 UTC", "AssertTimestampMonotonic": "477072833", "Before": "shutdown.target systemd-update-utmp.service ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40897000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2026-03-25 22:07:14 UTC", "ConditionTimestampMonotonic": "477072799", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2115", "ExecMainStartTimestamp": "Wed 2026-03-25 22:07:14 UTC", "ExecMainStartTimestampMonotonic": "477093473", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:14 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:14 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:15 UTC] ; pid=2118 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:15 UTC] ; pid=2118 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2026-03-25 22:07:14 UTC", "InactiveExitTimestampMonotonic": "477082211", "InvocationID": "d91ca89c936340aea63b824186c127b1", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2115", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3504013312", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2170880", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Wed 2026-03-25 22:07:15 UTC", "StateChangeTimestampMonotonic": "477121066", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-03-25 22:07:23.656815 | ubuntu-noble | 2026-03-25 22:07:23.657119 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-03-25 22:07:24.261663 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008229", "end": "2026-03-25 22:07:24.194713", "msg": "", "rc": 0, "start": "2026-03-25 22:07:24.186484", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-03-25 22:07:24.261918 | ubuntu-noble | 2026-03-25 22:07:24.262251 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-03-25 22:07:24.734422 | ubuntu-noble | --- before 2026-03-25 22:07:24.734505 | ubuntu-noble | +++ after 2026-03-25 22:07:24.735343 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-03-25 22:07:24.735380 | ubuntu-noble | { 2026-03-25 22:07:24.735393 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-03-25 22:07:24.735406 | ubuntu-noble | - "state": "file" 2026-03-25 22:07:24.735419 | ubuntu-noble | + "state": "absent" 2026-03-25 22:07:24.735430 | ubuntu-noble | } 2026-03-25 22:07:24.735443 | ubuntu-noble | 2026-03-25 22:07:24.735462 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-03-25 22:07:24.735605 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-03-25 22:07:24.735714 | ubuntu-noble | 2026-03-25 22:07:24.735840 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-03-25 22:07:25.469862 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Wed 2026-03-25 22:07:15 UTC", "ActiveEnterTimestampMonotonic": "477121066", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Wed 2026-03-25 22:07:14 UTC", "AssertTimestampMonotonic": "477072833", "Before": "shutdown.target systemd-update-utmp.service ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "41856000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2026-03-25 22:07:14 UTC", "ConditionTimestampMonotonic": "477072799", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2115", "ExecMainStartTimestamp": "Wed 2026-03-25 22:07:14 UTC", "ExecMainStartTimestampMonotonic": "477093473", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:14 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:14 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:15 UTC] ; pid=2118 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Wed 2026-03-25 22:07:14 UTC] ; stop_time=[Wed 2026-03-25 22:07:15 UTC] ; pid=2118 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2026-03-25 22:07:14 UTC", "InactiveExitTimestampMonotonic": "477082211", "InvocationID": "d91ca89c936340aea63b824186c127b1", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2115", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3537829888", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2170880", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Wed 2026-03-25 22:07:15 UTC", "StateChangeTimestampMonotonic": "477121066", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-03-25 22:07:25.474937 | ubuntu-noble | 2026-03-25 22:07:25.475151 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-03-25 22:07:25.943634 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.059210", "end": "2026-03-25 22:07:25.875771", "msg": "", "rc": 0, "start": "2026-03-25 22:07:25.816561", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2508\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1414\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2508\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1418\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2508", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1414", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2508", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1418", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-03-25 22:07:25.944076 | ubuntu-noble | 2026-03-25 22:07:25.944093 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-03-25 22:07:26.700185 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Wed 2026-03-25 22:07:25 UTC", "ActiveEnterTimestampMonotonic": "487514894", "ActiveExitTimestamp": "Wed 2026-03-25 22:07:25 UTC", "ActiveExitTimestampMonotonic": "487365679", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Wed 2026-03-25 22:07:25 UTC", "AssertTimestampMonotonic": "487405382", "Before": "shutdown.target systemd-update-utmp.service ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "157914000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2026-03-25 22:07:25 UTC", "ConditionTimestampMonotonic": "487405301", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2508", "ExecMainStartTimestamp": "Wed 2026-03-25 22:07:25 UTC", "ExecMainStartTimestampMonotonic": "487432138", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Wed 2026-03-25 22:07:25 UTC] ; stop_time=[Wed 2026-03-25 22:07:25 UTC] ; pid=2506 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Wed 2026-03-25 22:07:25 UTC] ; stop_time=[Wed 2026-03-25 22:07:25 UTC] ; pid=2506 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Wed 2026-03-25 22:07:25 UTC] ; stop_time=[Wed 2026-03-25 22:07:25 UTC] ; pid=2511 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Wed 2026-03-25 22:07:25 UTC] ; stop_time=[Wed 2026-03-25 22:07:25 UTC] ; pid=2511 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Wed 2026-03-25 22:07:25 UTC", "InactiveEnterTimestampMonotonic": "487404087", "InactiveExitTimestamp": "Wed 2026-03-25 22:07:25 UTC", "InactiveExitTimestampMonotonic": "487412979", "InvocationID": "677eeac55c4241e7999f436d068114b3", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2508", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3550167040", "MemoryCurrent": "1867776", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2174976", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Wed 2026-03-25 22:07:25 UTC", "StateChangeTimestampMonotonic": "487514894", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-03-25 22:07:26.702099 | ubuntu-noble | 2026-03-25 22:07:26.702147 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-03-25 22:07:26.702531 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-03-25 22:07:26.702877 | ubuntu-noble | 2026-03-25 22:07:26.791556 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-03-25 22:07:26.792396 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-03-25 22:07:37.202903 | ubuntu-noble | ok: Runtime: 0:00:21.696650 2026-03-25 22:07:37.240535 | 2026-03-25 22:07:37.240738 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-03-25 22:07:38.060024 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-03-25 22:07:38.070574 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:07:38.794866 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-03-25 22:07:38.795609 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-03-25 22:07:38.807884 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2026-03-25 22:07:38.807957 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2026-03-25 22:07:38.808345 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-03-25 22:07:38.808442 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-03-25 22:07:40.659820 | ubuntu-noble | INFO [delegated > verify] Executing 2026-03-25 22:07:40.661780 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-03-25 22:07:40.663079 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-03-25 22:07:40.663097 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-03-25 22:07:40.663117 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-03-25 22:07:40.663125 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-03-25 22:07:40.663131 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-03-25 22:07:40.663138 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-03-25 22:07:40.663144 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-03-25 22:07:40.663150 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-03-25 22:07:40.663156 | ubuntu-noble | 2026-03-25 22:07:40.663291 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-03-25 22:07:40.663300 | ubuntu-noble | MOLECULE_DEBUG: True 2026-03-25 22:07:40.663306 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-03-25 22:07:40.663311 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-03-25 22:07:40.663318 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-03-25 22:07:40.663324 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-03-25 22:07:40.663330 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-03-25 22:07:40.663337 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-03-25 22:07:40.663343 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-03-25 22:07:40.663349 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-03-25 22:07:40.663355 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-03-25 22:07:40.663361 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-03-25 22:07:40.663367 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-03-25 22:07:40.663373 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-03-25 22:07:40.663379 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-03-25 22:07:40.663385 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:07:40.663391 | ubuntu-noble | 2026-03-25 22:07:40.663412 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-03-25 22:07:40.965823 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-03-25 22:07:40.991151 | ubuntu-noble | ============================= test session starts ============================== 2026-03-25 22:07:40.991228 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-03-25 22:07:40.991251 | ubuntu-noble | using: pytest-8.4.2 2026-03-25 22:07:40.991728 | ubuntu-noble | registered third-party plugins: 2026-03-25 22:07:40.992198 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-03-25 22:07:40.992574 | ubuntu-noble | rootdir: /home/zuul 2026-03-25 22:07:40.992930 | ubuntu-noble | plugins: testinfra-10.2.2 2026-03-25 22:07:42.412112 | ubuntu-noble | collecting ... collected 6 items 2026-03-25 22:07:42.412320 | ubuntu-noble | 2026-03-25 22:07:48.149649 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-03-25 22:07:48.200573 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-03-25 22:07:51.672209 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-03-25 22:07:58.416572 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-03-25 22:07:59.886942 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-03-25 22:07:59.954137 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-03-25 22:07:59.954210 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-03-25 22:07:59.954228 | ubuntu-noble | 2026-03-25 22:07:59.954244 | ubuntu-noble | ============================== 6 passed in 18.93s ============================== 2026-03-25 22:07:59.989832 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-03-25 22:07:59.990372 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-03-25 22:07:59.991337 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-03-25 22:08:10.407873 | ubuntu-noble | ok: Runtime: 0:00:22.402853 2026-03-25 22:08:10.422928 | 2026-03-25 22:08:10.423138 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-03-25 22:08:11.029670 | ubuntu-noble | skipping: Conditional result was False 2026-03-25 22:08:11.045202 | 2026-03-25 22:08:11.045335 | PLAY RECAP 2026-03-25 22:08:11.045418 | centos-9-stream | ok: 2 changed: 1 unreachable: 0 failed: 1 skipped: 0 rescued: 0 ignored: 0 2026-03-25 22:08:11.045467 | debian-bookworm | ok: 10 changed: 5 unreachable: 0 failed: 1 skipped: 13 rescued: 0 ignored: 0 2026-03-25 22:08:11.045510 | ubuntu-jammy | ok: 6 changed: 3 unreachable: 0 failed: 1 skipped: 7 rescued: 0 ignored: 0 2026-03-25 22:08:11.045548 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-03-25 22:08:11.045576 | 2026-03-25 22:08:11.215557 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-03-25 22:08:11.223218 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-03-25 22:08:12.028704 | 2026-03-25 22:08:12.028863 | PLAY [Base post] 2026-03-25 22:08:12.041519 | 2026-03-25 22:08:12.041658 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-03-25 22:08:12.785924 | ubuntu-jammy | changed 2026-03-25 22:08:12.825136 | centos-9-stream | changed 2026-03-25 22:08:12.831875 | debian-bookworm | changed 2026-03-25 22:08:12.924512 | ubuntu-noble | changed 2026-03-25 22:08:12.948654 | 2026-03-25 22:08:12.948767 | PLAY RECAP 2026-03-25 22:08:12.948837 | centos-9-stream | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-03-25 22:08:12.948878 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-03-25 22:08:12.948909 | ubuntu-jammy | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-03-25 22:08:12.948936 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-03-25 22:08:12.948956 | 2026-03-25 22:08:13.070270 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-03-25 22:08:13.076150 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-03-25 22:08:13.898860 | 2026-03-25 22:08:13.899059 | PLAY [Base post-logs] 2026-03-25 22:08:13.911076 | 2026-03-25 22:08:13.911215 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-03-25 22:08:14.376176 | localhost | changed 2026-03-25 22:08:14.394763 | 2026-03-25 22:08:14.394952 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-03-25 22:08:14.422282 | localhost | ok 2026-03-25 22:08:14.427201 | 2026-03-25 22:08:14.427345 | TASK [Set zuul-log-path fact] 2026-03-25 22:08:14.444175 | localhost | ok 2026-03-25 22:08:14.454987 | 2026-03-25 22:08:14.455124 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-03-25 22:08:14.480826 | localhost | ok 2026-03-25 22:08:14.485140 | 2026-03-25 22:08:14.485262 | TASK [upload-logs : Create log directories] 2026-03-25 22:08:14.982427 | localhost | changed 2026-03-25 22:08:14.989250 | 2026-03-25 22:08:14.989481 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-03-25 22:08:15.539674 | localhost -> localhost | ok: Runtime: 0:00:00.008966 2026-03-25 22:08:15.548804 | 2026-03-25 22:08:15.549050 | TASK [upload-logs : Upload logs to log server] 2026-03-25 22:08:16.129752 | localhost | Output suppressed because no_log was given 2026-03-25 22:08:16.134953 | 2026-03-25 22:08:16.135467 | LOOP [upload-logs : Compress console log and json output] 2026-03-25 22:08:16.228614 | localhost | skipping: Conditional result was False 2026-03-25 22:08:16.234348 | localhost | skipping: Conditional result was False 2026-03-25 22:08:16.247710 | 2026-03-25 22:08:16.247830 | LOOP [upload-logs : Upload compressed console log and json output] 2026-03-25 22:08:16.309447 | localhost | skipping: Conditional result was False 2026-03-25 22:08:16.309762 | 2026-03-25 22:08:16.316772 | localhost | skipping: Conditional result was False 2026-03-25 22:08:16.330127 | 2026-03-25 22:08:16.330384 | LOOP [upload-logs : Upload console log and json output]