2026-06-02 11:05:13.036361 | Job console starting 2026-06-02 11:05:13.075697 | Updating git repos 2026-06-02 11:05:13.115325 | Cloning repos into workspace 2026-06-02 11:05:13.228620 | Restoring repo states 2026-06-02 11:05:13.255496 | Merging changes 2026-06-02 11:05:13.828199 | Checking out repos 2026-06-02 11:05:13.904878 | Preparing playbooks 2026-06-02 11:05:14.769617 | Running Ansible setup 2026-06-02 11:05:20.362003 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 11:05:21.206177 | 2026-06-02 11:05:21.206356 | PLAY [Base pre] 2026-06-02 11:05:21.224450 | 2026-06-02 11:05:21.224614 | TASK [Setup log path fact] 2026-06-02 11:05:21.245728 | debian-bookworm | ok 2026-06-02 11:05:21.267223 | 2026-06-02 11:05:21.267405 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 11:05:21.307538 | debian-bookworm | ok 2026-06-02 11:05:21.322705 | 2026-06-02 11:05:21.322890 | TASK [emit-job-header : Print job information] 2026-06-02 11:05:21.372985 | # Job Information 2026-06-02 11:05:21.373193 | Ansible Version: 2.16.14 2026-06-02 11:05:21.373229 | Job: ansible-collection-services-molecule-auditd 2026-06-02 11:05:21.373263 | Pipeline: check 2026-06-02 11:05:21.373286 | Executor: 521e9411259a 2026-06-02 11:05:21.373308 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 11:05:21.373330 | Event ID: e18ec970-5e72-11f1-814f-c123eedfbff8 2026-06-02 11:05:21.379431 | 2026-06-02 11:05:21.379552 | LOOP [emit-job-header : Print node information] 2026-06-02 11:05:21.492369 | debian-bookworm | ok: 2026-06-02 11:05:21.492650 | debian-bookworm | # Node Information 2026-06-02 11:05:21.492698 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 11:05:21.492733 | debian-bookworm | Hostname: debian 2026-06-02 11:05:21.492766 | debian-bookworm | Username: zuul 2026-06-02 11:05:21.492796 | debian-bookworm | Distro: Debian 12.14 2026-06-02 11:05:21.492828 | debian-bookworm | Provider: regiocloud-a 2026-06-02 11:05:21.492858 | debian-bookworm | Region: 2026-06-02 11:05:21.492888 | debian-bookworm | Label: debian-bookworm 2026-06-02 11:05:21.492916 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 11:05:21.492943 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe7a:f277 2026-06-02 11:05:21.548764 | debian-bookworm | ok: 2026-06-02 11:05:21.549040 | debian-bookworm | # Node Information 2026-06-02 11:05:21.549261 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 11:05:21.549324 | debian-bookworm | Hostname: ubuntu 2026-06-02 11:05:21.549371 | debian-bookworm | Username: zuul 2026-06-02 11:05:21.549411 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 11:05:21.549448 | debian-bookworm | Provider: regiocloud-a 2026-06-02 11:05:21.549484 | debian-bookworm | Region: 2026-06-02 11:05:21.549520 | debian-bookworm | Label: ubuntu-noble 2026-06-02 11:05:21.549555 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 11:05:21.549589 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe4e:6b55 2026-06-02 11:05:21.574277 | 2026-06-02 11:05:21.574454 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 11:05:22.107824 | debian-bookworm -> localhost | changed 2026-06-02 11:05:22.125724 | 2026-06-02 11:05:22.125880 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 11:05:23.187160 | debian-bookworm -> localhost | changed 2026-06-02 11:05:23.199628 | ubuntu-noble -> localhost | ok 2026-06-02 11:05:23.214611 | 2026-06-02 11:05:23.214807 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 11:05:23.522991 | debian-bookworm -> localhost | ok 2026-06-02 11:05:23.529737 | 2026-06-02 11:05:23.529861 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 11:05:23.574434 | debian-bookworm | ok 2026-06-02 11:05:23.578736 | ubuntu-noble | ok 2026-06-02 11:05:23.597768 | debian-bookworm | included: /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 11:05:23.597872 | ubuntu-noble | included: /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 11:05:23.604483 | 2026-06-02 11:05:23.604583 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 11:05:25.036194 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 11:05:25.036435 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/9118ca56e0b54635bb1153212337eb5c_id_rsa 2026-06-02 11:05:25.036475 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/9118ca56e0b54635bb1153212337eb5c_id_rsa.pub 2026-06-02 11:05:25.036502 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 11:05:25.036533 | debian-bookworm -> localhost | SHA256:gHPTXs/0tkjfOmlEDfQ1KHc0YfFc1kG9DBjukxUKrPU zuul-build-sshkey 2026-06-02 11:05:25.036558 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 11:05:25.036584 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 11:05:25.036607 | debian-bookworm -> localhost | | .. .oo=XX| 2026-06-02 11:05:25.036629 | debian-bookworm -> localhost | | . . ooo.++=O| 2026-06-02 11:05:25.036649 | debian-bookworm -> localhost | | o + + oo+.+o=| 2026-06-02 11:05:25.036669 | debian-bookworm -> localhost | | o = ..Eo..o.| 2026-06-02 11:05:25.036688 | debian-bookworm -> localhost | | S ++.o | 2026-06-02 11:05:25.036708 | debian-bookworm -> localhost | | ..+.o | 2026-06-02 11:05:25.036728 | debian-bookworm -> localhost | | ..o..| 2026-06-02 11:05:25.036749 | debian-bookworm -> localhost | | +. | 2026-06-02 11:05:25.036769 | debian-bookworm -> localhost | | ... | 2026-06-02 11:05:25.036788 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 11:05:25.036842 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.906680 2026-06-02 11:05:25.043777 | 2026-06-02 11:05:25.043907 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 11:05:25.075797 | debian-bookworm | ok 2026-06-02 11:05:25.097137 | ubuntu-noble | ok 2026-06-02 11:05:25.128790 | debian-bookworm | included: /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 11:05:25.128956 | ubuntu-noble | included: /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 11:05:25.148230 | 2026-06-02 11:05:25.148379 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 11:05:25.174434 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:05:25.185484 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:05:25.194111 | 2026-06-02 11:05:25.194225 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 11:05:25.926965 | debian-bookworm | changed 2026-06-02 11:05:26.010121 | ubuntu-noble | changed 2026-06-02 11:05:26.019489 | 2026-06-02 11:05:26.019640 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 11:05:26.308109 | debian-bookworm | ok 2026-06-02 11:05:26.350934 | ubuntu-noble | ok 2026-06-02 11:05:26.360391 | 2026-06-02 11:05:26.360543 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 11:05:27.039064 | debian-bookworm | changed 2026-06-02 11:05:27.175061 | ubuntu-noble | changed 2026-06-02 11:05:27.186125 | 2026-06-02 11:05:27.186284 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 11:05:27.899070 | debian-bookworm | changed 2026-06-02 11:05:27.976717 | ubuntu-noble | changed 2026-06-02 11:05:27.983808 | 2026-06-02 11:05:27.983943 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 11:05:28.010329 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:05:28.021280 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:05:28.027456 | 2026-06-02 11:05:28.027558 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 11:05:28.455618 | debian-bookworm -> localhost | changed 2026-06-02 11:05:28.472706 | 2026-06-02 11:05:28.472836 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 11:05:28.830434 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/9118ca56e0b54635bb1153212337eb5c_id_rsa (zuul-build-sshkey) 2026-06-02 11:05:28.830685 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.017632 2026-06-02 11:05:28.837889 | 2026-06-02 11:05:28.838014 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 11:05:29.211949 | debian-bookworm | ok 2026-06-02 11:05:29.239626 | ubuntu-noble | ok 2026-06-02 11:05:29.245828 | 2026-06-02 11:05:29.245942 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 11:05:29.270693 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:05:29.281825 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:05:29.298537 | 2026-06-02 11:05:29.298650 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 11:05:29.692345 | debian-bookworm | ok 2026-06-02 11:05:29.737682 | ubuntu-noble | ok 2026-06-02 11:05:29.755909 | 2026-06-02 11:05:29.756065 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 11:05:29.798058 | debian-bookworm | ok 2026-06-02 11:05:29.802693 | ubuntu-noble | ok 2026-06-02 11:05:29.807814 | 2026-06-02 11:05:29.807918 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 11:05:30.130460 | debian-bookworm -> localhost | ok 2026-06-02 11:05:30.137447 | 2026-06-02 11:05:30.137557 | TASK [validate-host : Collect information about the host] 2026-06-02 11:05:31.245571 | debian-bookworm | ok 2026-06-02 11:05:31.349764 | ubuntu-noble | ok 2026-06-02 11:05:31.360106 | 2026-06-02 11:05:31.360236 | TASK [validate-host : Sanitize hostname] 2026-06-02 11:05:31.436126 | debian-bookworm | ok 2026-06-02 11:05:31.444748 | ubuntu-noble | ok 2026-06-02 11:05:31.450961 | 2026-06-02 11:05:31.451100 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 11:05:32.052689 | ubuntu-noble -> localhost | changed 2026-06-02 11:05:32.084564 | debian-bookworm -> localhost | changed 2026-06-02 11:05:32.090640 | 2026-06-02 11:05:32.090768 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 11:05:32.621740 | debian-bookworm | ok 2026-06-02 11:05:32.626501 | ubuntu-noble | ok 2026-06-02 11:05:32.631592 | 2026-06-02 11:05:32.631719 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 11:05:33.192793 | debian-bookworm -> localhost | changed 2026-06-02 11:05:33.214823 | ubuntu-noble -> localhost | changed 2026-06-02 11:05:33.229693 | 2026-06-02 11:05:33.229825 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 11:05:33.545396 | debian-bookworm | ok 2026-06-02 11:05:33.550560 | ubuntu-noble | ok 2026-06-02 11:05:33.556888 | 2026-06-02 11:05:33.556999 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 11:05:34.766212 | debian-bookworm | changed: 2026-06-02 11:05:34.766809 | debian-bookworm | cd+++++++++ src/ 2026-06-02 11:05:34.766953 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 11:05:34.767015 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 11:05:34.767090 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 11:05:34.767141 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:06:58.356962 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:06:58.390098 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:06:58.891161 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:06:58.891730 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:06:58.912227 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:06:58.917884 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 11:06:58.917963 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:06:58.971266 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:06:58.971913 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:06:58.994874 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:06:59.000797 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 11:06:59.000866 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:00.179441 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 11:07:00.180031 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 11:07:00.591444 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 11:07:00.591943 | debian-bookworm | config file = None 2026-06-02 11:07:00.592406 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 11:07:00.592961 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 11:07:00.593437 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 11:07:00.593784 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 11:07:00.594118 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 11:07:00.594505 | debian-bookworm | jinja version = 3.1.6 2026-06-02 11:07:00.594810 | debian-bookworm | libyaml = True 2026-06-02 11:07:00.595105 | debian-bookworm | No config file found; using defaults 2026-06-02 11:07:00.595609 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 11:07:00.597534 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 11:07:00.597992 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 11:07:00.598657 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 11:07:00.599044 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 11:07:00.599552 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 11:07:00.599907 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 11:07:00.602333 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 11:07:00.602933 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 11:07:00.603298 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 11:07:00.603805 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 11:07:00.604221 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 11:07:00.604725 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 11:07:00.605291 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 11:07:00.605842 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 11:07:00.606229 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 11:07:00.606512 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 11:07:00.606861 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 11:07:00.607119 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 11:07:00.609524 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 11:07:00.610022 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 11:07:00.610398 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 11:07:00.610768 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 11:07:00.611199 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 11:07:00.611543 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 11:07:00.611789 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 11:07:00.612046 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 11:07:00.612510 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 11:07:00.612750 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 11:07:00.613209 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 11:07:00.613496 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 11:07:00.615419 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 11:07:00.615656 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 11:07:00.615884 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 11:07:00.616293 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 11:07:00.616572 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 11:07:00.616825 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 11:07:00.617332 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 11:07:00.617666 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 11:07:00.656728 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 11:07:00.657441 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 11:07:00.657935 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 11:07:00.658440 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 11:07:00.658820 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 11:07:00.659233 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 11:07:00.659576 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 11:07:00.659872 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 11:07:00.660261 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 11:07:00.660631 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 11:07:00.660944 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 11:07:00.661411 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 11:07:00.661786 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 11:07:00.427708 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 11:07:00.428569 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 11:07:00.662152 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 11:07:00.662618 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 11:07:00.663136 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 11:07:00.663385 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 11:07:00.663624 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 11:07:00.666170 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 11:07:00.666637 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 11:07:00.666995 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 11:07:00.667366 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 11:07:00.667944 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 11:07:00.668432 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 11:07:00.668800 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 11:07:00.669176 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 11:07:00.670672 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 11:07:00.671169 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 11:07:00.671592 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 11:07:00.671973 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 11:07:00.672291 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 11:07:00.672703 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 11:07:00.673061 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 11:07:00.673426 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 11:07:00.673877 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 11:07:00.674135 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 11:07:00.674496 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 11:07:00.674831 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 11:07:00.675044 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 11:07:00.675253 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 11:07:00.675555 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 11:07:00.675778 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 11:07:00.678492 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 11:07:00.678765 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 11:07:00.679533 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 11:07:00.679806 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 11:07:00.680164 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 11:07:00.680466 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 11:07:00.680783 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 11:07:00.681116 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 11:07:00.681846 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 11:07:00.682117 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 11:07:00.682568 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 11:07:00.682802 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 11:07:00.683516 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 11:07:00.683755 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 11:07:00.684097 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 11:07:00.684408 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 11:07:00.684741 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 11:07:00.685062 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 11:07:00.685300 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 11:07:00.685563 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 11:07:00.686643 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 11:07:00.686870 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 11:07:00.687312 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 11:07:00.687598 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 11:07:00.688036 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 11:07:00.688357 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 11:07:00.688692 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 11:07:00.689009 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 11:07:00.689272 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 11:07:00.689664 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 11:07:00.689891 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 11:07:00.690160 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 11:07:00.691706 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 11:07:00.691904 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 11:07:00.692788 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 11:07:00.693015 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 11:07:00.694118 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 11:07:00.694465 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 11:07:00.694739 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 11:07:00.694954 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 11:07:00.695254 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 11:07:00.695608 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 11:07:00.695823 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 11:07:00.696108 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 11:07:00.696412 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 11:07:00.696734 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 11:07:00.697403 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 11:07:00.697797 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 11:07:00.698150 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 11:07:00.698507 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 11:07:00.699064 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 11:07:00.699379 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 11:07:00.706593 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 11:07:00.707081 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 11:07:00.707538 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 11:07:00.707916 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 11:07:00.708352 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 11:07:00.708739 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 11:07:00.709268 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 11:07:00.709739 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 11:07:00.710250 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 11:07:00.710586 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 11:07:00.712201 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 11:07:00.712977 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 11:07:00.713616 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 11:07:00.713983 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 11:07:00.722611 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 11:07:00.723003 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 11:07:00.723726 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 11:07:00.724178 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 11:07:00.725533 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 11:07:00.725912 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 11:07:00.726445 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 11:07:00.726733 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 11:07:00.727116 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 11:07:00.727421 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 11:07:00.727901 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 11:07:00.728206 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 11:07:00.728888 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 11:07:00.729375 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 11:07:00.729683 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 11:07:00.730182 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 11:07:00.730643 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 11:07:00.731119 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 11:07:00.731574 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 11:07:00.731884 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 11:07:00.732393 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 11:07:00.732779 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 11:07:00.733120 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 11:07:00.733680 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 11:07:00.733939 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 11:07:00.734232 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 11:07:00.734625 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 11:07:00.735003 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 11:07:00.735278 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 11:07:00.735591 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 11:07:00.738147 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 11:07:00.738473 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 11:07:00.738728 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 11:07:00.739039 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 11:07:00.742752 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 11:07:00.743083 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 11:07:00.743874 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 11:07:00.744199 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 11:07:00.745101 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 11:07:00.745445 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 11:07:00.745789 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 11:07:00.746126 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 11:07:00.746491 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 11:07:00.746752 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 11:07:00.748848 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 11:07:00.749282 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 11:07:00.749652 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 11:07:00.750023 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 11:07:00.750374 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 11:07:00.750690 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 11:07:00.755880 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 11:07:00.756497 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 11:07:00.759959 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 11:07:00.760434 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 11:07:00.760825 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 11:07:00.994268 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 11:07:00.997418 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 11:07:00.840507 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 11:07:00.842806 | ubuntu-noble | config file = None 2026-06-02 11:07:00.842830 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 11:07:00.842837 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 11:07:00.842916 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 11:07:00.843165 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 11:07:00.843521 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 11:07:00.843852 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 11:07:00.844069 | ubuntu-noble | libyaml = True 2026-06-02 11:07:00.844285 | ubuntu-noble | No config file found; using defaults 2026-06-02 11:07:00.844940 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 11:07:00.854187 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 11:07:00.854829 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 11:07:00.865974 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 11:07:00.866272 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 11:07:00.867902 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 11:07:00.869204 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 11:07:00.869813 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 11:07:00.870248 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 11:07:00.870882 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 11:07:00.871355 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 11:07:00.871678 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 11:07:00.871985 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 11:07:00.872555 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 11:07:00.872917 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 11:07:00.873548 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 11:07:00.874012 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 11:07:00.876281 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 11:07:00.876888 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 11:07:00.877256 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 11:07:00.877910 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 11:07:00.878485 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 11:07:00.878922 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 11:07:00.879345 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 11:07:00.879851 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 11:07:00.880513 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 11:07:00.880911 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 11:07:00.881210 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 11:07:00.881535 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 11:07:00.881855 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 11:07:00.882109 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 11:07:00.882392 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 11:07:00.882696 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 11:07:00.882993 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 11:07:00.883272 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 11:07:00.884062 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 11:07:00.884811 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 11:07:00.886148 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 11:07:00.887219 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 11:07:00.887810 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 11:07:00.888321 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 11:07:00.888813 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 11:07:00.889300 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 11:07:00.890141 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 11:07:00.890609 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 11:07:00.891067 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 11:07:00.891802 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 11:07:00.914970 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 11:07:00.915361 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 11:07:00.916101 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 11:07:00.916611 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 11:07:00.918159 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 11:07:00.918681 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 11:07:00.919102 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 11:07:00.919670 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 11:07:00.921813 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 11:07:00.921838 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 11:07:00.921844 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 11:07:00.921848 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 11:07:00.921959 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 11:07:00.922266 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 11:07:00.922668 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 11:07:00.923044 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 11:07:00.923829 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 11:07:00.924238 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 11:07:00.930635 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 11:07:00.930969 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 11:07:00.931322 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 11:07:00.931628 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 11:07:00.931925 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 11:07:00.932147 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 11:07:00.933060 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 11:07:00.933544 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 11:07:00.933861 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 11:07:00.934264 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 11:07:00.934573 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 11:07:00.934986 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 11:07:00.935385 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 11:07:00.935803 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 11:07:00.936128 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 11:07:00.936401 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 11:07:00.936830 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 11:07:00.937175 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 11:07:00.937536 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 11:07:00.937819 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 11:07:00.938165 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 11:07:00.938700 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 11:07:00.939148 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 11:07:00.939371 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 11:07:00.939702 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 11:07:00.939964 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 11:07:00.940288 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 11:07:00.940660 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 11:07:00.940995 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 11:07:00.941277 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 11:07:00.941585 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 11:07:00.941895 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 11:07:00.942175 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 11:07:00.942498 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 11:07:00.942821 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 11:07:00.943099 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 11:07:00.953311 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 11:07:00.953672 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 11:07:00.954459 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 11:07:00.954918 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 11:07:00.955174 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 11:07:00.955491 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 11:07:00.956164 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 11:07:00.956453 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 11:07:00.956924 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 11:07:00.957809 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 11:07:00.957831 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 11:07:00.957838 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 11:07:00.958360 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 11:07:00.958631 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 11:07:00.958868 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 11:07:00.959084 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 11:07:00.961054 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 11:07:00.961366 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 11:07:00.962073 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 11:07:00.962297 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 11:07:00.962734 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 11:07:00.963096 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 11:07:00.963699 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 11:07:00.963947 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 11:07:00.964928 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 11:07:00.965146 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 11:07:00.965889 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 11:07:00.965946 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 11:07:00.967894 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 11:07:00.967928 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 11:07:00.969731 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 11:07:00.969763 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 11:07:00.970921 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 11:07:00.970951 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 11:07:00.971527 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 11:07:00.971545 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 11:07:00.974644 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 11:07:00.974687 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 11:07:00.974698 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 11:07:00.974708 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 11:07:00.978829 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 11:07:00.978873 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 11:07:00.978906 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 11:07:00.978916 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 11:07:00.978926 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 11:07:00.979253 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 11:07:00.979615 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 11:07:00.979954 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 11:07:00.980401 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 11:07:00.980839 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 11:07:00.981182 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 11:07:00.981533 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 11:07:00.982031 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 11:07:00.982367 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 11:07:00.984906 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 11:07:00.985308 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 11:07:00.985631 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 11:07:00.985954 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 11:07:00.988377 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 11:07:00.988640 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 11:07:00.988883 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 11:07:00.989101 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 11:07:00.989451 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 11:07:00.989657 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 11:07:00.989968 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 11:07:00.990193 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 11:07:01.034575 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 11:07:01.035407 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 11:07:01.035992 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 11:07:01.036653 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 11:07:01.037241 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 11:07:01.037639 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 11:07:01.037988 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 11:07:01.038314 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 11:07:01.038654 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 11:07:01.039129 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 11:07:01.040819 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 11:07:01.040851 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 11:07:01.040863 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 11:07:01.040874 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 11:07:01.040883 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 11:07:01.041110 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 11:07:01.042003 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 11:07:01.042387 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 11:07:01.042753 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 11:07:01.043055 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 11:07:01.043613 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 11:07:01.043973 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 11:07:01.044424 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 11:07:01.044735 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 11:07:01.045034 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 11:07:01.045396 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 11:07:01.045725 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 11:07:01.046007 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 11:07:01.046302 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 11:07:01.046551 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 11:07:01.046851 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 11:07:01.047140 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 11:07:01.052039 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 11:07:01.052538 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 11:07:01.052859 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 11:07:01.570906 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 11:07:01.393849 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 11:07:01.394582 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 11:07:01.953275 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 11:07:02.386828 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 11:07:03.162006 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 11:07:03.162418 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 11:07:02.801589 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 11:07:03.480893 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 11:07:03.481252 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 11:07:04.607895 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 11:07:04.608225 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 11:07:04.780625 | debian-bookworm | Starting galaxy collection install process 2026-06-02 11:07:04.781055 | debian-bookworm | Process install dependency map 2026-06-02 11:07:04.781418 | debian-bookworm | Starting collection install process 2026-06-02 11:07:04.781733 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 11:07:04.782040 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 11:07:04.782377 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 11:07:04.782707 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 11:07:04.783028 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1847ok30w5az/tmphn06swbx/osism-commons-0.20260601.0-ockz7gt2 2026-06-02 11:07:04.783359 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 11:07:04.783671 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 11:07:04.867937 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 11:07:04.868151 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 11:07:04.869027 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 11:07:04.857935 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 11:07:04.858381 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 11:07:05.040877 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 11:07:05.040947 | ubuntu-noble | Process install dependency map 2026-06-02 11:07:05.041253 | ubuntu-noble | Starting collection install process 2026-06-02 11:07:05.041706 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 11:07:05.042137 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 11:07:05.042570 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 11:07:05.042991 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 11:07:05.043378 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1672ft5vlcme/tmptfige9hx/osism-commons-0.20260601.0-idk2uo1q 2026-06-02 11:07:05.043814 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 11:07:05.044202 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 11:07:05.137898 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 11:07:05.137975 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 11:07:05.138048 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 11:07:05.683895 | debian-bookworm | ok: Runtime: 0:00:07.001180 2026-06-02 11:07:05.705384 | ubuntu-noble | ok: Runtime: 0:00:07.231912 2026-06-02 11:07:05.723355 | 2026-06-02 11:07:05.723541 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 11:07:06.288848 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:07:06.290294 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:07:06.303418 | 2026-06-02 11:07:06.303617 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 11:07:06.942461 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:06.952766 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:07.037518 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:07.047934 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:07.432062 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:07.433011 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:07.453013 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:07.459014 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 11:07:07.459207 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:07.572216 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:07.573206 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:07.597085 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:07.603236 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 11:07:07.603438 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:08.615792 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 11:07:08.905131 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 11:07:08.905175 | debian-bookworm | config file = None 2026-06-02 11:07:08.905187 | debian-bookworm | configured module search path = 2026-06-02 11:07:08.905192 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 11:07:08.905198 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 11:07:08.905202 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 11:07:08.905206 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 11:07:08.905210 | debian-bookworm | jinja version = 3.1.6 2026-06-02 11:07:08.905214 | debian-bookworm | libyaml = True 2026-06-02 11:07:08.905218 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:08.905222 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:08.905225 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:08.905229 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:08.905233 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:08.905237 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 11:07:08.905241 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:08.905244 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:08.905248 | debian-bookworm | 2026-06-02 11:07:08.905252 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:08.905256 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 11:07:08.905260 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:08.905263 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:08.905267 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:08.905271 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:08.905275 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:08.905279 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:08.905283 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:08.905287 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:08.905330 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:08.905334 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:08.905338 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:08.905342 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:08.905345 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:08.905349 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:08.905353 | debian-bookworm | 2026-06-02 11:07:08.905361 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:09.151521 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 11:07:08.977329 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 11:07:09.337685 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 11:07:09.337742 | ubuntu-noble | config file = None 2026-06-02 11:07:09.337768 | ubuntu-noble | configured module search path = 2026-06-02 11:07:09.337815 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 11:07:09.337824 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 11:07:09.337830 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 11:07:09.337836 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 11:07:09.337843 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 11:07:09.337849 | ubuntu-noble | libyaml = True 2026-06-02 11:07:09.338187 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:09.338200 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:09.338207 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:09.338214 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:09.338220 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:09.338226 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 11:07:09.338232 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:09.338238 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:09.338245 | ubuntu-noble | 2026-06-02 11:07:09.338440 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:09.338452 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 11:07:09.338458 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:09.338464 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:09.338470 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:09.338476 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:09.338483 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:09.338489 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:09.338495 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:09.338501 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:09.338506 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:09.338512 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:09.338518 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:09.338524 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:09.338529 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:09.338536 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:09.338542 | ubuntu-noble | 2026-06-02 11:07:09.338819 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:09.368698 | debian-bookworm | 2026-06-02 11:07:09.369153 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 11:07:09.369570 | debian-bookworm | 2026-06-02 11:07:09.369880 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 11:07:09.659305 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 11:07:09.921505 | ubuntu-noble | 2026-06-02 11:07:09.921666 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 11:07:09.921693 | ubuntu-noble | 2026-06-02 11:07:09.921706 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 11:07:10.427725 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 11:07:10.427831 | debian-bookworm | 2026-06-02 11:07:10.428150 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 11:07:11.215979 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 11:07:11.216038 | ubuntu-noble | 2026-06-02 11:07:11.216048 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 11:07:14.630249 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.6 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.6 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:14.630609 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:14.630801 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:14.630944 | debian-bookworm | 2026-06-02 11:07:14.631094 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 11:07:14.645268 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 11:07:14.645462 | debian-bookworm | 2026-06-02 11:07:14.645648 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 11:07:14.645847 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 11:07:14.646015 | debian-bookworm | 2026-06-02 11:07:14.706870 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 11:07:14.707230 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 11:07:16.245839 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.3 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.3 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:16.245910 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:16.245931 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 11:07:16.245937 | ubuntu-noble | 2026-06-02 11:07:16.246129 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 11:07:16.263253 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 11:07:16.263624 | ubuntu-noble | 2026-06-02 11:07:16.263960 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 11:07:16.264274 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 11:07:16.264621 | ubuntu-noble | 2026-06-02 11:07:16.352211 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 11:07:16.353011 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 11:07:16.875723 | debian-bookworm | ok: Runtime: 0:00:08.128710 2026-06-02 11:07:16.882285 | ubuntu-noble | ok: Runtime: 0:00:09.762099 2026-06-02 11:07:16.888909 | 2026-06-02 11:07:16.889018 | TASK [ansible-molecule : Reset connection] 2026-06-02 11:07:16.936014 | 2026-06-02 11:07:16.936207 | TASK [ansible-molecule : Reset connection] 2026-06-02 11:07:16.987795 | 2026-06-02 11:07:16.987997 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 11:07:17.794130 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:17.803182 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:17.933541 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:17.946224 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:18.216386 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:18.217020 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:18.237353 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:18.243030 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 11:07:18.243123 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:18.524645 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:18.525264 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:18.548959 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:18.554848 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 11:07:18.554928 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:19.299685 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 11:07:19.299850 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 11:07:19.654696 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 11:07:19.655126 | debian-bookworm | config file = None 2026-06-02 11:07:19.655556 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 11:07:19.655987 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 11:07:19.656446 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 11:07:19.656774 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 11:07:19.657109 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 11:07:19.657425 | debian-bookworm | jinja version = 3.1.6 2026-06-02 11:07:19.657686 | debian-bookworm | libyaml = True 2026-06-02 11:07:19.657945 | debian-bookworm | No config file found; using defaults 2026-06-02 11:07:19.658380 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 11:07:19.660832 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 11:07:19.661168 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 11:07:19.661530 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 11:07:19.663080 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 11:07:19.668425 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 11:07:19.668806 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 11:07:19.669307 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 11:07:19.669694 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 11:07:19.670082 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 11:07:19.670483 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 11:07:19.671386 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 11:07:19.671935 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 11:07:19.672244 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 11:07:19.672564 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 11:07:19.673005 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 11:07:19.673411 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 11:07:19.678099 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 11:07:19.678536 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 11:07:19.691675 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 11:07:19.692227 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 11:07:19.692658 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 11:07:19.693065 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 11:07:19.693566 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 11:07:19.693868 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 11:07:19.694257 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 11:07:19.694567 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 11:07:19.694962 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 11:07:19.695351 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 11:07:19.695838 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 11:07:19.696141 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 11:07:19.696554 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 11:07:19.696962 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 11:07:19.699448 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 11:07:19.699880 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 11:07:19.700170 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 11:07:19.700551 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 11:07:19.700808 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 11:07:19.701221 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 11:07:19.708389 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 11:07:19.708705 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 11:07:19.709072 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 11:07:19.709410 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 11:07:19.709731 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 11:07:19.710037 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 11:07:19.710351 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 11:07:19.710652 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 11:07:19.713038 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 11:07:19.713365 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 11:07:19.713647 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 11:07:19.713924 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 11:07:19.714209 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 11:07:19.714487 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 11:07:19.714696 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 11:07:19.715016 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 11:07:19.715590 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 11:07:19.715918 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 11:07:19.716232 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 11:07:19.716519 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 11:07:19.717849 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 11:07:19.718143 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 11:07:19.718442 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 11:07:19.718682 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 11:07:19.753079 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 11:07:19.753500 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 11:07:19.754070 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 11:07:19.754621 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 11:07:19.755035 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 11:07:19.755364 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 11:07:19.755848 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 11:07:19.756179 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 11:07:19.756591 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 11:07:19.756873 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 11:07:19.757500 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 11:07:19.757881 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 11:07:19.758158 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 11:07:19.758613 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 11:07:19.758999 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 11:07:19.759401 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 11:07:19.759780 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 11:07:19.760070 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 11:07:19.761253 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 11:07:19.761757 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 11:07:19.762069 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 11:07:19.762429 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 11:07:19.762844 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 11:07:19.763126 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 11:07:19.763448 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 11:07:19.763765 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 11:07:19.764187 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 11:07:19.764502 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 11:07:19.764877 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 11:07:19.765232 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 11:07:19.765549 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 11:07:19.765932 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 11:07:19.766221 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 11:07:19.766524 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 11:07:19.766794 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 11:07:19.767099 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 11:07:19.767510 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 11:07:19.767794 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 11:07:19.768077 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 11:07:19.768421 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 11:07:19.768808 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 11:07:19.769084 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 11:07:19.769373 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 11:07:19.769583 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 11:07:19.769866 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 11:07:19.770068 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 11:07:19.770287 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 11:07:19.770487 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 11:07:19.770766 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 11:07:19.770978 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 11:07:19.771251 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 11:07:19.771545 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 11:07:19.772751 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 11:07:19.773021 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 11:07:19.773359 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 11:07:19.773593 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 11:07:19.773826 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 11:07:19.774057 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 11:07:19.774299 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 11:07:19.774589 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 11:07:19.774824 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 11:07:19.775049 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 11:07:19.778180 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 11:07:19.778648 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 11:07:19.779771 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 11:07:19.780037 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 11:07:19.780435 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 11:07:19.780685 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 11:07:19.781100 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 11:07:19.781370 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 11:07:19.781864 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 11:07:19.782110 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 11:07:19.782377 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 11:07:19.782625 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 11:07:19.783503 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 11:07:19.783732 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 11:07:19.784355 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 11:07:19.784600 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 11:07:19.784834 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 11:07:19.785088 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 11:07:19.785492 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 11:07:19.785817 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 11:07:19.786434 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 11:07:19.786846 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 11:07:19.787819 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 11:07:19.788136 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 11:07:19.788784 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 11:07:19.789160 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 11:07:19.790063 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 11:07:19.790311 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 11:07:19.790527 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 11:07:19.790739 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 11:07:19.792311 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 11:07:19.792591 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 11:07:19.794442 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 11:07:19.794699 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 11:07:19.795000 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 11:07:19.795213 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 11:07:19.795505 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 11:07:19.795774 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 11:07:19.797958 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 11:07:19.798217 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 11:07:19.798701 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 11:07:19.798922 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 11:07:19.799381 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 11:07:19.799688 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 11:07:19.799912 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 11:07:19.800162 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 11:07:19.800549 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 11:07:19.800770 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 11:07:19.801095 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 11:07:19.801352 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 11:07:19.801539 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 11:07:19.801806 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 11:07:19.802646 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 11:07:19.802841 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 11:07:19.804443 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 11:07:19.804726 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 11:07:19.804970 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 11:07:19.805211 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 11:07:19.807179 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 11:07:19.807424 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 11:07:19.807632 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 11:07:19.807932 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 11:07:19.808175 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 11:07:19.808483 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 11:07:19.808728 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 11:07:19.808970 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 11:07:19.809567 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 11:07:19.809826 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 11:07:19.810557 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 11:07:19.810938 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 11:07:19.811337 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 11:07:19.811661 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 11:07:19.811912 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 11:07:19.812164 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 11:07:19.812520 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 11:07:19.812844 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 11:07:19.813590 | debian-bookworm | Starting galaxy collection install process 2026-06-02 11:07:19.813877 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 11:07:19.863468 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 11:07:19.863698 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 11:07:19.880577 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 11:07:19.883078 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 11:07:19.892695 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 11:07:19.892780 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 11:07:19.892800 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 11:07:19.900733 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 11:07:19.941949 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 11:07:19.942493 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 11:07:20.191327 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 11:07:20.191374 | debian-bookworm | config file = None 2026-06-02 11:07:20.191379 | debian-bookworm | configured module search path = 2026-06-02 11:07:20.191384 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 11:07:20.191389 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 11:07:20.191393 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 11:07:20.191397 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 11:07:20.191401 | debian-bookworm | jinja version = 3.1.6 2026-06-02 11:07:20.191404 | debian-bookworm | libyaml = True 2026-06-02 11:07:20.191622 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:20.191632 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:20.191639 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:20.191645 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:20.191652 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:20.191659 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 11:07:20.191666 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:20.191672 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:20.191679 | debian-bookworm | 2026-06-02 11:07:20.191927 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:20.191942 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 11:07:20.191948 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:20.191973 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:20.191980 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:20.191987 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:20.191997 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:20.192003 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:20.192009 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:20.192017 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:20.192023 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:20.192030 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:20.192036 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:20.192043 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:20.192056 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:20.192062 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:20.192069 | debian-bookworm | 2026-06-02 11:07:20.192374 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:20.440600 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 11:07:20.348829 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 11:07:20.348870 | ubuntu-noble | config file = None 2026-06-02 11:07:20.348878 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 11:07:20.349148 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 11:07:20.349617 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 11:07:20.349953 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 11:07:20.350265 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 11:07:20.350642 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 11:07:20.350957 | ubuntu-noble | libyaml = True 2026-06-02 11:07:20.351246 | ubuntu-noble | No config file found; using defaults 2026-06-02 11:07:20.351868 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 11:07:20.360908 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 11:07:20.361343 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 11:07:20.361860 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 11:07:20.362173 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 11:07:20.362718 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 11:07:20.363094 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 11:07:20.363529 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 11:07:20.363911 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 11:07:20.364753 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 11:07:20.365230 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 11:07:20.365664 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 11:07:20.366131 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 11:07:20.366557 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 11:07:20.367032 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 11:07:20.367608 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 11:07:20.367994 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 11:07:20.368298 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 11:07:20.368569 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 11:07:20.369037 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 11:07:20.369401 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 11:07:20.373553 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 11:07:20.373975 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 11:07:20.376926 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 11:07:20.377270 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 11:07:20.377753 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 11:07:20.378119 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 11:07:20.379050 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 11:07:20.379515 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 11:07:20.380821 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 11:07:20.380848 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 11:07:20.400264 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 11:07:20.400860 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 11:07:20.401311 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 11:07:20.401798 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 11:07:20.403078 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 11:07:20.403503 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 11:07:20.403907 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 11:07:20.404271 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 11:07:20.405016 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 11:07:20.405444 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 11:07:20.405723 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 11:07:20.406024 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 11:07:20.406445 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 11:07:20.406722 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 11:07:20.407040 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 11:07:20.407443 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 11:07:20.409280 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 11:07:20.409596 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 11:07:20.409901 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 11:07:20.410214 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 11:07:20.410516 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 11:07:20.410921 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 11:07:20.411187 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 11:07:20.411510 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 11:07:20.417886 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 11:07:20.418807 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 11:07:20.419377 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 11:07:20.419765 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 11:07:20.420616 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 11:07:20.420901 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 11:07:20.423105 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 11:07:20.423511 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 11:07:20.423946 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 11:07:20.424218 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 11:07:20.424710 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 11:07:20.424993 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 11:07:20.425445 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 11:07:20.425704 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 11:07:20.426089 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 11:07:20.426370 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 11:07:20.426893 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 11:07:20.427154 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 11:07:20.427420 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 11:07:20.428805 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 11:07:20.428826 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 11:07:20.428830 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 11:07:20.428834 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 11:07:20.428880 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 11:07:20.429209 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 11:07:20.429556 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 11:07:20.430005 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 11:07:20.430314 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 11:07:20.430600 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 11:07:20.431408 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 11:07:20.431754 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 11:07:20.432033 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 11:07:20.432427 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 11:07:20.432673 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 11:07:20.432984 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 11:07:20.433203 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 11:07:20.433644 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 11:07:20.433967 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 11:07:20.434208 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 11:07:20.434495 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 11:07:20.435299 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 11:07:20.435683 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 11:07:20.436754 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 11:07:20.437099 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 11:07:20.437554 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 11:07:20.437814 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 11:07:20.438385 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 11:07:20.438697 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 11:07:20.439021 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 11:07:20.439271 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 11:07:20.440277 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 11:07:20.440597 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 11:07:20.443756 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 11:07:20.444808 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 11:07:20.447736 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 11:07:20.448059 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 11:07:20.448872 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 11:07:20.449269 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 11:07:20.449628 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 11:07:20.450114 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 11:07:20.450442 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 11:07:20.450894 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 11:07:20.451280 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 11:07:20.451689 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 11:07:20.452118 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 11:07:20.452461 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 11:07:20.452875 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 11:07:20.453170 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 11:07:20.453630 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 11:07:20.454103 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 11:07:20.454619 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 11:07:20.454973 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 11:07:20.455495 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 11:07:20.455926 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 11:07:20.456207 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 11:07:20.456503 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 11:07:20.456894 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 11:07:20.457956 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 11:07:20.460819 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 11:07:20.460859 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 11:07:20.460870 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 11:07:20.460880 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 11:07:20.460889 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 11:07:20.460899 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 11:07:20.461216 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 11:07:20.461672 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 11:07:20.461998 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 11:07:20.462484 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 11:07:20.463821 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 11:07:20.464168 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 11:07:20.464568 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 11:07:20.464987 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 11:07:20.465384 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 11:07:20.465651 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 11:07:20.466374 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 11:07:20.466746 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 11:07:20.476651 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 11:07:20.477125 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 11:07:20.477636 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 11:07:20.478094 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 11:07:20.478525 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 11:07:20.478918 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 11:07:20.479212 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 11:07:20.479615 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 11:07:20.479925 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 11:07:20.480222 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 11:07:20.480657 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 11:07:20.480958 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 11:07:20.481224 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 11:07:20.481536 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 11:07:20.481842 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 11:07:20.482122 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 11:07:20.482366 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 11:07:20.482651 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 11:07:20.483633 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 11:07:20.483951 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 11:07:20.484753 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 11:07:20.485038 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 11:07:20.486637 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 11:07:20.486935 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 11:07:20.526741 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 11:07:20.527904 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 11:07:20.529854 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 11:07:20.529915 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 11:07:20.530478 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 11:07:20.531029 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 11:07:20.531859 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 11:07:20.532468 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 11:07:20.533094 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 11:07:20.533740 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 11:07:20.534446 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 11:07:20.535061 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 11:07:20.535687 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 11:07:20.536862 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 11:07:20.536907 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 11:07:20.536921 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 11:07:20.537176 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 11:07:20.537653 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 11:07:20.538043 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 11:07:20.538439 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 11:07:20.538735 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 11:07:20.539031 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 11:07:20.646095 | debian-bookworm | 2026-06-02 11:07:20.646522 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 11:07:20.646822 | debian-bookworm | 2026-06-02 11:07:20.647143 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 11:07:20.547209 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 11:07:20.547576 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 11:07:20.547950 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 11:07:20.549588 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 11:07:20.551231 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 11:07:20.551501 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 11:07:20.626048 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 11:07:20.627824 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 11:07:20.641146 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 11:07:20.643648 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 11:07:20.653662 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 11:07:20.653823 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 11:07:20.653934 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 11:07:20.664195 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 11:07:21.043820 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 11:07:21.043895 | ubuntu-noble | config file = None 2026-06-02 11:07:21.043909 | ubuntu-noble | configured module search path = 2026-06-02 11:07:21.043919 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 11:07:21.043929 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 11:07:21.043959 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 11:07:21.043970 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 11:07:21.043979 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 11:07:21.043988 | ubuntu-noble | libyaml = True 2026-06-02 11:07:21.044523 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:21.044547 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:21.044557 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:21.044567 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:21.044576 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:21.044585 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 11:07:21.044595 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:21.044604 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:21.044617 | ubuntu-noble | 2026-06-02 11:07:21.044929 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:21.044955 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 11:07:21.044965 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:21.045000 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:21.045011 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:21.045021 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:21.045031 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:21.045040 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:21.045077 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:21.045087 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:21.045096 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:21.045105 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:21.045114 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:21.045124 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:21.045133 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:21.045142 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:21.045153 | ubuntu-noble | 2026-06-02 11:07:21.045917 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:21.365922 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 11:07:21.683822 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 11:07:21.683889 | debian-bookworm | 2026-06-02 11:07:21.683909 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 11:07:21.725553 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 11:07:21.725676 | debian-bookworm | 2026-06-02 11:07:21.725821 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 11:07:21.773505 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 11:07:21.773586 | debian-bookworm | 2026-06-02 11:07:21.773625 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 11:07:21.808773 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 11:07:21.808842 | debian-bookworm | 2026-06-02 11:07:21.808851 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 11:07:21.610864 | ubuntu-noble | 2026-06-02 11:07:21.610950 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 11:07:21.611113 | ubuntu-noble | 2026-06-02 11:07:21.613160 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 11:07:22.872553 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 11:07:22.872734 | ubuntu-noble | 2026-06-02 11:07:22.873059 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 11:07:22.909765 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 11:07:22.909971 | ubuntu-noble | 2026-06-02 11:07:22.910825 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 11:07:22.977644 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 11:07:22.977899 | ubuntu-noble | 2026-06-02 11:07:22.978154 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 11:07:23.009843 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 11:07:23.010151 | ubuntu-noble | 2026-06-02 11:07:23.010480 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 11:07:25.561411 | debian-bookworm | The following additional packages will be installed: 2026-06-02 11:07:25.561498 | debian-bookworm | libauparse0 2026-06-02 11:07:25.561634 | debian-bookworm | Suggested packages: 2026-06-02 11:07:25.561742 | debian-bookworm | audispd-plugins 2026-06-02 11:07:25.561910 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 11:07:25.562037 | debian-bookworm | auditd libauparse0 2026-06-02 11:07:25.562171 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 11:07:25.563144 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780398341, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3883 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3883 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 11:07:25.563196 | debian-bookworm | 2026-06-02 11:07:25.563341 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 11:07:27.970472 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 11:07:27.970539 | debian-bookworm | audispd-plugins 2026-06-02 11:07:27.970555 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 11:07:27.970585 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780398341, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (1065 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (1065 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 11:07:27.970601 | debian-bookworm | 2026-06-02 11:07:27.970700 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 11:07:28.128112 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 11:07:28.128541 | ubuntu-noble | libauparse0t64 2026-06-02 11:07:28.128888 | ubuntu-noble | Suggested packages: 2026-06-02 11:07:28.129178 | ubuntu-noble | audispd-plugins 2026-06-02 11:07:28.129839 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 11:07:28.129873 | ubuntu-noble | auditd libauparse0t64 2026-06-02 11:07:28.130573 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 2 not upgraded. 2026-06-02 11:07:28.135950 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780398343, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 2 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2614 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 2 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2614 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 11:07:28.136012 | ubuntu-noble | 2026-06-02 11:07:28.136018 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 11:07:29.051480 | debian-bookworm | --- before 2026-06-02 11:07:29.051591 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2102csat50de/tmp8l3iv9x1/auditd.conf.j2 2026-06-02 11:07:29.051604 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 11:07:29.051613 | debian-bookworm | +# 2026-06-02 11:07:29.051631 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 11:07:29.051678 | debian-bookworm | +# 2026-06-02 11:07:29.051808 | debian-bookworm | + 2026-06-02 11:07:29.051924 | debian-bookworm | +local_events = yes 2026-06-02 11:07:29.052050 | debian-bookworm | +write_logs = yes 2026-06-02 11:07:29.052312 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 11:07:29.052396 | debian-bookworm | +log_group = adm 2026-06-02 11:07:29.052414 | debian-bookworm | +log_format = RAW 2026-06-02 11:07:29.052542 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 11:07:29.052659 | debian-bookworm | +freq = 50 2026-06-02 11:07:29.052778 | debian-bookworm | +max_log_file = 8 2026-06-02 11:07:29.052897 | debian-bookworm | +num_logs = 5 2026-06-02 11:07:29.053046 | debian-bookworm | +priority_boost = 4 2026-06-02 11:07:29.053163 | debian-bookworm | +disp_qos = lossy 2026-06-02 11:07:29.053574 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 11:07:29.053709 | debian-bookworm | +name_format = NONE 2026-06-02 11:07:29.053831 | debian-bookworm | +##name = mydomain 2026-06-02 11:07:29.053948 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 11:07:29.054065 | debian-bookworm | +space_left = 12361 2026-06-02 11:07:29.054170 | debian-bookworm | +space_left_action = email 2026-06-02 11:07:29.054313 | debian-bookworm | +verify_email = yes 2026-06-02 11:07:29.054417 | debian-bookworm | +action_mail_acct = root 2026-06-02 11:07:29.054531 | debian-bookworm | +admin_space_left = 50 2026-06-02 11:07:29.054648 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 11:07:29.054766 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 11:07:29.054880 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 11:07:29.054996 | debian-bookworm | +use_libwrap = yes 2026-06-02 11:07:29.055111 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 11:07:29.055227 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 11:07:29.055352 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 11:07:29.055468 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 11:07:29.055584 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 11:07:29.055695 | debian-bookworm | +enable_krb5 = no 2026-06-02 11:07:29.055812 | debian-bookworm | +krb5_principal = auditd 2026-06-02 11:07:29.055928 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 11:07:29.056044 | debian-bookworm | +distribute_network = no 2026-06-02 11:07:29.056153 | debian-bookworm | 2026-06-02 11:07:29.056367 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780398447.9944637-2472-187139235981048/.source.conf", "state": "file", "uid": 0} 2026-06-02 11:07:29.056408 | debian-bookworm | 2026-06-02 11:07:29.056548 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 11:07:29.473304 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 11:07:29.473376 | debian-bookworm | 2026-06-02 11:07:29.473463 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 11:07:30.306807 | debian-bookworm | --- before 2026-06-02 11:07:30.306985 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2102csat50de/tmp4tb5gkds/20-neo23x0.rules.j2 2026-06-02 11:07:30.307150 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 11:07:30.307363 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 11:07:30.307535 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 11:07:30.307694 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 11:07:30.307853 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 11:07:30.308004 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 11:07:30.308144 | debian-bookworm | +# 2026-06-02 11:07:30.308302 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 11:07:30.308443 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 11:07:30.308578 | debian-bookworm | +# 2026-06-02 11:07:30.308715 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 11:07:30.308850 | debian-bookworm | +# 2026-06-02 11:07:30.309033 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 11:07:30.309170 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 11:07:30.309323 | debian-bookworm | +# 2026-06-02 11:07:30.309459 | debian-bookworm | +# Based on rules published here: 2026-06-02 11:07:30.309598 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 11:07:30.309948 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 11:07:30.310168 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 11:07:30.310398 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 11:07:30.310610 | debian-bookworm | +# Linux audit repo 2026-06-02 11:07:30.310817 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 11:07:30.311001 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 11:07:30.313013 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 11:07:30.313040 | debian-bookworm | +# 2026-06-02 11:07:30.313045 | debian-bookworm | +# Further rules 2026-06-02 11:07:30.313049 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 11:07:30.313054 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 11:07:30.313059 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 11:07:30.313063 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 11:07:30.313067 | debian-bookworm | + 2026-06-02 11:07:30.313071 | debian-bookworm | +# Remove any existing rules 2026-06-02 11:07:30.313075 | debian-bookworm | +-D 2026-06-02 11:07:30.313079 | debian-bookworm | + 2026-06-02 11:07:30.313083 | debian-bookworm | +# Buffer Size 2026-06-02 11:07:30.313087 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 11:07:30.313095 | debian-bookworm | +-b 8192 2026-06-02 11:07:30.316962 | debian-bookworm | + 2026-06-02 11:07:30.316989 | debian-bookworm | +# Failure Mode 2026-06-02 11:07:30.316994 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 11:07:30.316998 | debian-bookworm | +-f 1 2026-06-02 11:07:30.317002 | debian-bookworm | + 2026-06-02 11:07:30.317006 | debian-bookworm | +# Ignore errors 2026-06-02 11:07:30.317011 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 11:07:30.317015 | debian-bookworm | +-i 2026-06-02 11:07:30.317019 | debian-bookworm | + 2026-06-02 11:07:30.317023 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 11:07:30.317027 | debian-bookworm | + 2026-06-02 11:07:30.317031 | debian-bookworm | +## Audit the audit logs 2026-06-02 11:07:30.317036 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 11:07:30.317040 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 11:07:30.317044 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 11:07:30.317048 | debian-bookworm | + 2026-06-02 11:07:30.317052 | debian-bookworm | +## Auditd configuration 2026-06-02 11:07:30.317056 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 11:07:30.317061 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 11:07:30.317064 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 11:07:30.317068 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 11:07:30.317072 | debian-bookworm | + 2026-06-02 11:07:30.317076 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 11:07:30.317080 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 11:07:30.317084 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 11:07:30.317088 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 11:07:30.317092 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 11:07:30.317096 | debian-bookworm | + 2026-06-02 11:07:30.317100 | debian-bookworm | +## Access to all audit trails 2026-06-02 11:07:30.317104 | debian-bookworm | + 2026-06-02 11:07:30.317108 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 11:07:30.317112 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 11:07:30.317116 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 11:07:30.317124 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 11:07:30.317128 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 11:07:30.317181 | debian-bookworm | + 2026-06-02 11:07:30.317328 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 11:07:30.317440 | debian-bookworm | + 2026-06-02 11:07:30.317554 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 11:07:30.317652 | debian-bookworm | + 2026-06-02 11:07:30.317755 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 11:07:30.317860 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 11:07:30.317959 | debian-bookworm | + 2026-06-02 11:07:30.318062 | debian-bookworm | +## Ignore current working directory records 2026-06-02 11:07:30.318165 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 11:07:30.318378 | debian-bookworm | + 2026-06-02 11:07:30.318386 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 11:07:30.318486 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 11:07:30.318589 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 11:07:30.318688 | debian-bookworm | + 2026-06-02 11:07:30.318793 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 11:07:30.318902 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 11:07:30.319003 | debian-bookworm | + 2026-06-02 11:07:30.319109 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 11:07:30.319215 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 11:07:30.319325 | debian-bookworm | + 2026-06-02 11:07:30.319428 | debian-bookworm | +## Open VM Tools 2026-06-02 11:07:30.319535 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 11:07:30.319634 | debian-bookworm | + 2026-06-02 11:07:30.319740 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 11:07:30.319845 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 11:07:30.319949 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 11:07:30.320053 | debian-bookworm | + 2026-06-02 11:07:30.320158 | debian-bookworm | +## FileBeat 2026-06-02 11:07:30.320290 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 11:07:30.320394 | debian-bookworm | + 2026-06-02 11:07:30.320498 | debian-bookworm | +## More information on how to filter events 2026-06-02 11:07:30.320611 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 11:07:30.320710 | debian-bookworm | + 2026-06-02 11:07:30.320815 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 11:07:30.320948 | debian-bookworm | + 2026-06-02 11:07:30.321046 | debian-bookworm | +## Kernel parameters 2026-06-02 11:07:30.321142 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 11:07:30.321236 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 11:07:30.321340 | debian-bookworm | + 2026-06-02 11:07:30.321437 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 11:07:30.321537 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 11:07:30.321632 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 11:07:30.321727 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 11:07:30.321826 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 11:07:30.321915 | debian-bookworm | + 2026-06-02 11:07:30.322010 | debian-bookworm | +## Modprobe configuration 2026-06-02 11:07:30.322103 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 11:07:30.322198 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 11:07:30.322301 | debian-bookworm | + 2026-06-02 11:07:30.322395 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 11:07:30.322493 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 11:07:30.322583 | debian-bookworm | + 2026-06-02 11:07:30.322678 | debian-bookworm | +## Special files 2026-06-02 11:07:30.322773 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 11:07:30.322879 | debian-bookworm | + 2026-06-02 11:07:30.322962 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 11:07:30.323058 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 11:07:30.323149 | debian-bookworm | + 2026-06-02 11:07:30.323266 | debian-bookworm | +### NFS mount 2026-06-02 11:07:30.323380 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.323477 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.323565 | debian-bookworm | + 2026-06-02 11:07:30.323663 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 11:07:30.323760 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 11:07:30.323849 | debian-bookworm | + 2026-06-02 11:07:30.323962 | debian-bookworm | +## Time 2026-06-02 11:07:30.324040 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 11:07:30.324134 | debian-bookworm | +### Local time zone 2026-06-02 11:07:30.324232 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 11:07:30.324335 | debian-bookworm | + 2026-06-02 11:07:30.324428 | debian-bookworm | +## Stunnel 2026-06-02 11:07:30.324520 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 11:07:30.324615 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 11:07:30.324705 | debian-bookworm | + 2026-06-02 11:07:30.324802 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 11:07:30.324896 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 11:07:30.325047 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 11:07:30.325115 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 11:07:30.325211 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 11:07:30.325333 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 11:07:30.325427 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 11:07:30.325522 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 11:07:30.325615 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 11:07:30.325710 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 11:07:30.325803 | debian-bookworm | + 2026-06-02 11:07:30.325894 | debian-bookworm | +## User, group, password databases 2026-06-02 11:07:30.325989 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 11:07:30.326080 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 11:07:30.326178 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 11:07:30.326282 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 11:07:30.326377 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 11:07:30.326469 | debian-bookworm | + 2026-06-02 11:07:30.326564 | debian-bookworm | +## Sudoers file changes 2026-06-02 11:07:30.326658 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 11:07:30.326751 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 11:07:30.326843 | debian-bookworm | + 2026-06-02 11:07:30.326935 | debian-bookworm | +## Passwd 2026-06-02 11:07:30.327030 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 11:07:30.327121 | debian-bookworm | + 2026-06-02 11:07:30.327218 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 11:07:30.327323 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 11:07:30.327418 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 11:07:30.327516 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 11:07:30.327608 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 11:07:30.327701 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 11:07:30.327796 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 11:07:30.327892 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 11:07:30.327984 | debian-bookworm | + 2026-06-02 11:07:30.328076 | debian-bookworm | +## Login configuration and information 2026-06-02 11:07:30.328169 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 11:07:30.328293 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 11:07:30.328391 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 11:07:30.328485 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 11:07:30.328578 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 11:07:30.328669 | debian-bookworm | + 2026-06-02 11:07:30.328763 | debian-bookworm | +## Network Environment 2026-06-02 11:07:30.328859 | debian-bookworm | +### Changes to hostname 2026-06-02 11:07:30.329015 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 11:07:30.329116 | debian-bookworm | + 2026-06-02 11:07:30.329217 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 11:07:30.329344 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 11:07:30.329429 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 11:07:30.329521 | debian-bookworm | + 2026-06-02 11:07:30.329617 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 11:07:30.329714 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 11:07:30.329805 | debian-bookworm | + 2026-06-02 11:07:30.329898 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 11:07:30.329994 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 11:07:30.330094 | debian-bookworm | + 2026-06-02 11:07:30.330190 | debian-bookworm | +### Changes to other files 2026-06-02 11:07:30.330297 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 11:07:30.330392 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 11:07:30.330487 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 11:07:30.330580 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 11:07:30.330678 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 11:07:30.330768 | debian-bookworm | + 2026-06-02 11:07:30.330861 | debian-bookworm | +### Changes to issue 2026-06-02 11:07:30.330956 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 11:07:30.331052 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 11:07:30.331146 | debian-bookworm | + 2026-06-02 11:07:30.331260 | debian-bookworm | +## System startup scripts 2026-06-02 11:07:30.331367 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 11:07:30.331462 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 11:07:30.331558 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 11:07:30.331649 | debian-bookworm | + 2026-06-02 11:07:30.331744 | debian-bookworm | +## Library search paths 2026-06-02 11:07:30.331838 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 11:07:30.331935 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 11:07:30.332026 | debian-bookworm | + 2026-06-02 11:07:30.332124 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 11:07:30.332219 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 11:07:30.332323 | debian-bookworm | + 2026-06-02 11:07:30.332414 | debian-bookworm | +## Pam configuration 2026-06-02 11:07:30.332507 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 11:07:30.332631 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 11:07:30.332701 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 11:07:30.332797 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 11:07:30.332891 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 11:07:30.333039 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 11:07:30.333135 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 11:07:30.333227 | debian-bookworm | + 2026-06-02 11:07:30.333336 | debian-bookworm | +## Mail configuration 2026-06-02 11:07:30.333431 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 11:07:30.333526 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 11:07:30.333620 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 11:07:30.333725 | debian-bookworm | + 2026-06-02 11:07:30.333808 | debian-bookworm | +## SSH configuration 2026-06-02 11:07:30.333906 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 11:07:30.334003 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 11:07:30.334093 | debian-bookworm | + 2026-06-02 11:07:30.334188 | debian-bookworm | +## root ssh key tampering 2026-06-02 11:07:30.334313 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 11:07:30.334409 | debian-bookworm | + 2026-06-02 11:07:30.334502 | debian-bookworm | +# Systemd 2026-06-02 11:07:30.334599 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 11:07:30.334694 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 11:07:30.334810 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 11:07:30.334882 | debian-bookworm | + 2026-06-02 11:07:30.334978 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 11:07:30.335075 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:30.335220 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:30.335378 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 11:07:30.335510 | debian-bookworm | + 2026-06-02 11:07:30.335642 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 11:07:30.335800 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 11:07:30.335945 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:30.336092 | debian-bookworm | + 2026-06-02 11:07:30.336317 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 11:07:30.336506 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 11:07:30.336651 | debian-bookworm | + 2026-06-02 11:07:30.336787 | debian-bookworm | +## Critical elements access failures 2026-06-02 11:07:30.336891 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337029 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337129 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337225 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337342 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337439 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337538 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337636 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 11:07:30.337728 | debian-bookworm | + 2026-06-02 11:07:30.337826 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 11:07:30.337924 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 11:07:30.338022 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 11:07:30.338113 | debian-bookworm | + 2026-06-02 11:07:30.338211 | debian-bookworm | +## Power state 2026-06-02 11:07:30.338319 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 11:07:30.338419 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 11:07:30.338511 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 11:07:30.338605 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 11:07:30.338698 | debian-bookworm | + 2026-06-02 11:07:30.338801 | debian-bookworm | +## Session initiation information 2026-06-02 11:07:30.338924 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 11:07:30.339021 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 11:07:30.339116 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 11:07:30.339208 | debian-bookworm | + 2026-06-02 11:07:30.339343 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 11:07:30.339444 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.339539 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.339638 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.339734 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.339833 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.339922 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340019 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340118 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340233 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340327 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340422 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340519 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340614 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:30.340780 | debian-bookworm | + 2026-06-02 11:07:30.340878 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 11:07:30.340995 | debian-bookworm | + 2026-06-02 11:07:30.341092 | debian-bookworm | +## Reconnaissance 2026-06-02 11:07:30.341188 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 11:07:30.341318 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 11:07:30.341418 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 11:07:30.341512 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 11:07:30.341605 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 11:07:30.341700 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 11:07:30.341794 | debian-bookworm | + 2026-06-02 11:07:30.341892 | debian-bookworm | +## Suspicious activity 2026-06-02 11:07:30.341986 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 11:07:30.342082 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 11:07:30.342180 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 11:07:30.342307 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 11:07:30.342531 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 11:07:30.342540 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 11:07:30.342601 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 11:07:30.342691 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 11:07:30.342966 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 11:07:30.342976 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 11:07:30.342982 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 11:07:30.343064 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 11:07:30.343157 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 11:07:30.343263 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 11:07:30.343357 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 11:07:30.343451 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 11:07:30.343548 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 11:07:30.343671 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 11:07:30.343742 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 11:07:30.343838 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 11:07:30.343928 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 11:07:30.344023 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 11:07:30.344115 | debian-bookworm | + 2026-06-02 11:07:30.344208 | debian-bookworm | +## sssd 2026-06-02 11:07:30.344338 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.344427 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.344527 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.344624 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.344744 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.344817 | debian-bookworm | + 2026-06-02 11:07:30.344927 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 11:07:30.345029 | debian-bookworm | + 2026-06-02 11:07:30.345126 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 11:07:30.345223 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 11:07:30.345331 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 11:07:30.345427 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 11:07:30.345521 | debian-bookworm | + 2026-06-02 11:07:30.345617 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 11:07:30.345714 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 11:07:30.345813 | debian-bookworm | + 2026-06-02 11:07:30.345900 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 11:07:30.346004 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 11:07:30.346097 | debian-bookworm | + 2026-06-02 11:07:30.346194 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 11:07:30.346395 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 11:07:30.346436 | debian-bookworm | + 2026-06-02 11:07:30.346532 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 11:07:30.346629 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 11:07:30.346722 | debian-bookworm | + 2026-06-02 11:07:30.346818 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 11:07:30.346913 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 11:07:30.347004 | debian-bookworm | + 2026-06-02 11:07:30.347104 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 11:07:30.347208 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 11:07:30.347325 | debian-bookworm | + 2026-06-02 11:07:30.347408 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 11:07:30.347503 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 11:07:30.347596 | debian-bookworm | + 2026-06-02 11:07:30.347699 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 11:07:30.347794 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 11:07:30.347892 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 11:07:30.347988 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 11:07:30.348077 | debian-bookworm | + 2026-06-02 11:07:30.348169 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 11:07:30.348279 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 11:07:30.348372 | debian-bookworm | + 2026-06-02 11:07:30.348467 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 11:07:30.348566 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 11:07:30.348662 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 11:07:30.348762 | debian-bookworm | + 2026-06-02 11:07:30.348865 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 11:07:30.348991 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 11:07:30.349078 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 11:07:30.349175 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 11:07:30.349312 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 11:07:30.349402 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 11:07:30.349505 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 11:07:30.349601 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 11:07:30.349695 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 11:07:30.349793 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 11:07:30.349887 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 11:07:30.349990 | debian-bookworm | + 2026-06-02 11:07:30.350093 | debian-bookworm | +### kde4 2026-06-02 11:07:30.350191 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.350311 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:30.350401 | debian-bookworm | + 2026-06-02 11:07:30.350494 | debian-bookworm | +## dbus-send invocation 2026-06-02 11:07:30.350589 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 11:07:30.350685 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 11:07:30.350782 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 11:07:30.350874 | debian-bookworm | + 2026-06-02 11:07:30.350969 | debian-bookworm | +## pkexec invocation 2026-06-02 11:07:30.351071 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 11:07:30.351181 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 11:07:30.351270 | debian-bookworm | + 2026-06-02 11:07:30.351366 | debian-bookworm | +## Suspicious shells 2026-06-02 11:07:30.351586 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 11:07:30.351684 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 11:07:30.351701 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 11:07:30.351760 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 11:07:30.351847 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 11:07:30.351948 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 11:07:30.352041 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 11:07:30.352135 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 11:07:30.352386 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 11:07:30.352408 | debian-bookworm | + 2026-06-02 11:07:30.352425 | debian-bookworm | +# Web Server Actvity 2026-06-02 11:07:30.352551 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 11:07:30.352603 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 11:07:30.352696 | debian-bookworm | + 2026-06-02 11:07:30.352791 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 11:07:30.352883 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 11:07:30.352999 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 11:07:30.353096 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 11:07:30.353186 | debian-bookworm | + 2026-06-02 11:07:30.353305 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 11:07:30.353406 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 11:07:30.353498 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 11:07:30.353595 | debian-bookworm | + 2026-06-02 11:07:30.353700 | debian-bookworm | +## Shell/profile configurations 2026-06-02 11:07:30.353794 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 11:07:30.353885 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 11:07:30.353979 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 11:07:30.354074 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 11:07:30.354168 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 11:07:30.354341 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 11:07:30.355135 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 11:07:30.355160 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 11:07:30.355172 | debian-bookworm | + 2026-06-02 11:07:30.355177 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 11:07:30.355181 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 11:07:30.355184 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 11:07:30.355188 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 11:07:30.355192 | debian-bookworm | + 2026-06-02 11:07:30.355196 | debian-bookworm | +## Injection 2026-06-02 11:07:30.355204 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 11:07:30.355296 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 11:07:30.355391 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 11:07:30.355545 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 11:07:30.355583 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 11:07:30.355681 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 11:07:30.355774 | debian-bookworm | + 2026-06-02 11:07:30.355867 | debian-bookworm | +## Anonymous File Creation 2026-06-02 11:07:30.355963 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 11:07:30.356059 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 11:07:30.356178 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 11:07:30.356271 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 11:07:30.356362 | debian-bookworm | + 2026-06-02 11:07:30.356455 | debian-bookworm | +## Privilege Abuse 2026-06-02 11:07:30.356553 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 11:07:30.356657 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 11:07:30.356750 | debian-bookworm | + 2026-06-02 11:07:30.356846 | debian-bookworm | +# Socket Creations 2026-06-02 11:07:30.356963 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 11:07:30.357062 | debian-bookworm | + 2026-06-02 11:07:30.357320 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 11:07:30.357378 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 11:07:30.357394 | debian-bookworm | + 2026-06-02 11:07:30.357490 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 11:07:30.357616 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 11:07:30.357635 | debian-bookworm | + 2026-06-02 11:07:30.357730 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 11:07:30.357821 | debian-bookworm | + 2026-06-02 11:07:30.357917 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 11:07:30.358011 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 11:07:30.358106 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 11:07:30.358195 | debian-bookworm | + 2026-06-02 11:07:30.358319 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 11:07:30.358436 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 11:07:30.358579 | debian-bookworm | + 2026-06-02 11:07:30.358669 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 11:07:30.358809 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 11:07:30.358913 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 11:07:30.359011 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 11:07:30.359167 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 11:07:30.359310 | debian-bookworm | + 2026-06-02 11:07:30.359451 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 11:07:30.359554 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 11:07:30.359653 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 11:07:30.359751 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 11:07:30.359848 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 11:07:30.359945 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 11:07:30.360041 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 11:07:30.360142 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 11:07:30.360233 | debian-bookworm | + 2026-06-02 11:07:30.360356 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 11:07:30.360460 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 11:07:30.360566 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 11:07:30.360712 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 11:07:30.360794 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 11:07:30.360950 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 11:07:30.361042 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 11:07:30.361154 | debian-bookworm | + 2026-06-02 11:07:30.361300 | debian-bookworm | +# npm 2026-06-02 11:07:30.361397 | debian-bookworm | +## T1072 third party software 2026-06-02 11:07:30.361500 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 11:07:30.361587 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 11:07:30.361687 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 11:07:30.361786 | debian-bookworm | + 2026-06-02 11:07:30.361880 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 11:07:30.361975 | debian-bookworm | +## T1072 third party software 2026-06-02 11:07:30.362070 | debian-bookworm | +## https://www.cpan.org 2026-06-02 11:07:30.362169 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 11:07:30.362277 | debian-bookworm | + 2026-06-02 11:07:30.362371 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 11:07:30.362487 | debian-bookworm | +## T1072 third party software 2026-06-02 11:07:30.362587 | debian-bookworm | +## https://rubygems.org 2026-06-02 11:07:30.362681 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 11:07:30.362774 | debian-bookworm | + 2026-06-02 11:07:30.362870 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 11:07:30.362963 | debian-bookworm | +## T1072 third party software 2026-06-02 11:07:30.363057 | debian-bookworm | +## https://luarocks.org 2026-06-02 11:07:30.363161 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 11:07:30.363375 | debian-bookworm | + 2026-06-02 11:07:30.363445 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 11:07:30.363464 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 11:07:30.363558 | debian-bookworm | +## T1072 third party software 2026-06-02 11:07:30.363653 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 11:07:30.363751 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 11:07:30.363842 | debian-bookworm | + 2026-06-02 11:07:30.364014 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 11:07:30.364045 | debian-bookworm | + 2026-06-02 11:07:30.364128 | debian-bookworm | +## GDS specific secrets 2026-06-02 11:07:30.364221 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 11:07:30.364341 | debian-bookworm | + 2026-06-02 11:07:30.364435 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 11:07:30.364536 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 11:07:30.364634 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 11:07:30.364724 | debian-bookworm | + 2026-06-02 11:07:30.364822 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 11:07:30.364982 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 11:07:30.365374 | debian-bookworm | + 2026-06-02 11:07:30.365466 | debian-bookworm | +## Salt 2026-06-02 11:07:30.365566 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 11:07:30.365684 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 11:07:30.365772 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 11:07:30.365987 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 11:07:30.366090 | debian-bookworm | + 2026-06-02 11:07:30.366276 | debian-bookworm | +## Otter 2026-06-02 11:07:30.366321 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 11:07:30.366448 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 11:07:30.366532 | debian-bookworm | + 2026-06-02 11:07:30.366633 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 11:07:30.366727 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 11:07:30.366819 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 11:07:30.366914 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 11:07:30.367018 | debian-bookworm | +### macOS 2026-06-02 11:07:30.367110 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 11:07:30.367204 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 11:07:30.367370 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 11:07:30.367422 | debian-bookworm | + 2026-06-02 11:07:30.367512 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 11:07:30.367616 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 11:07:30.367704 | debian-bookworm | +### macOS 2026-06-02 11:07:30.367799 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 11:07:30.367898 | debian-bookworm | + 2026-06-02 11:07:30.368011 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 11:07:30.368092 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 11:07:30.368192 | debian-bookworm | +### macOS 2026-06-02 11:07:30.368303 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 11:07:30.368393 | debian-bookworm | + 2026-06-02 11:07:30.368489 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 11:07:30.368583 | debian-bookworm | + 2026-06-02 11:07:30.368684 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 11:07:30.368772 | debian-bookworm | +### macOS 2026-06-02 11:07:30.368872 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 11:07:30.369103 | debian-bookworm | + 2026-06-02 11:07:30.369125 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 11:07:30.369171 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 11:07:30.369298 | debian-bookworm | +### macOS 2026-06-02 11:07:30.369394 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 11:07:30.369490 | debian-bookworm | + 2026-06-02 11:07:30.369596 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 11:07:30.369681 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 11:07:30.369781 | debian-bookworm | +### macOS 2026-06-02 11:07:30.369874 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 11:07:30.369966 | debian-bookworm | + 2026-06-02 11:07:30.370067 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 11:07:30.370167 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 11:07:30.370315 | debian-bookworm | +### macOS 2026-06-02 11:07:30.370372 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 11:07:30.370468 | debian-bookworm | + 2026-06-02 11:07:30.370565 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 11:07:30.370697 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 11:07:30.370758 | debian-bookworm | +### macOS 2026-06-02 11:07:30.370857 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 11:07:30.370952 | debian-bookworm | + 2026-06-02 11:07:30.371050 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 11:07:30.371156 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 11:07:30.371262 | debian-bookworm | +### macOS 2026-06-02 11:07:30.371379 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 11:07:30.371452 | debian-bookworm | + 2026-06-02 11:07:30.371819 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 11:07:30.371879 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 11:07:30.372025 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 11:07:30.372164 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 11:07:30.372440 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 11:07:30.372597 | debian-bookworm | +### macOS 2026-06-02 11:07:30.372711 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 11:07:30.372811 | debian-bookworm | + 2026-06-02 11:07:30.372935 | debian-bookworm | +## Docker 2026-06-02 11:07:30.373055 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 11:07:30.373170 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 11:07:30.373315 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 11:07:30.373420 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 11:07:30.373512 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 11:07:30.373614 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 11:07:30.373704 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 11:07:30.373804 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 11:07:30.373916 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 11:07:30.374022 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 11:07:30.374100 | debian-bookworm | + 2026-06-02 11:07:30.374219 | debian-bookworm | +## Virtualization stuff 2026-06-02 11:07:30.374333 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 11:07:30.374433 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 11:07:30.374573 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 11:07:30.374708 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 11:07:30.374811 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 11:07:30.374912 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 11:07:30.375024 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 11:07:30.375128 | debian-bookworm | + 2026-06-02 11:07:30.375336 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 11:07:30.375435 | debian-bookworm | + 2026-06-02 11:07:30.375544 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 11:07:30.375658 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 11:07:30.375762 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 11:07:30.375855 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 11:07:30.375974 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 11:07:30.376326 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 11:07:30.376445 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 11:07:30.376776 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 11:07:30.376813 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 11:07:30.376956 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 11:07:30.377040 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 11:07:30.377141 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 11:07:30.377255 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 11:07:30.377375 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 11:07:30.377479 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 11:07:30.377577 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 11:07:30.377677 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 11:07:30.377769 | debian-bookworm | + 2026-06-02 11:07:30.377865 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 11:07:30.377959 | debian-bookworm | + 2026-06-02 11:07:30.378052 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 11:07:30.378149 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 11:07:30.378301 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 11:07:30.378348 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 11:07:30.378458 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 11:07:30.378551 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 11:07:30.378646 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 11:07:30.378749 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 11:07:30.378839 | debian-bookworm | + 2026-06-02 11:07:30.378931 | debian-bookworm | +### qemu on macOS 2026-06-02 11:07:30.379110 | debian-bookworm | + 2026-06-02 11:07:30.379124 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 11:07:30.385026 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 11:07:30.385075 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 11:07:30.385081 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 11:07:30.385089 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 11:07:30.385095 | debian-bookworm | + 2026-06-02 11:07:30.385101 | debian-bookworm | +## Kubelet 2026-06-02 11:07:30.385106 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 11:07:30.385110 | debian-bookworm | + 2026-06-02 11:07:30.385116 | debian-bookworm | +# ipc system call 2026-06-02 11:07:30.385121 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 11:07:30.385126 | debian-bookworm | + 2026-06-02 11:07:30.385137 | debian-bookworm | +## msgctl 2026-06-02 11:07:30.385143 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 11:07:30.385148 | debian-bookworm | +## msgget 2026-06-02 11:07:30.385153 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 11:07:30.385158 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:30.385163 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 11:07:30.385169 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 11:07:30.385174 | debian-bookworm | + 2026-06-02 11:07:30.385179 | debian-bookworm | +## semctl 2026-06-02 11:07:30.385183 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 11:07:30.385188 | debian-bookworm | +## semget 2026-06-02 11:07:30.385193 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 11:07:30.385198 | debian-bookworm | +## semop 2026-06-02 11:07:30.385202 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 11:07:30.385207 | debian-bookworm | +## semtimedop 2026-06-02 11:07:30.385212 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 11:07:30.385217 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:30.385233 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 11:07:30.385256 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 11:07:30.385261 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 11:07:30.385266 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 11:07:30.385271 | debian-bookworm | + 2026-06-02 11:07:30.385276 | debian-bookworm | +## shmctl 2026-06-02 11:07:30.385281 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 11:07:30.385286 | debian-bookworm | +## shmget 2026-06-02 11:07:30.385291 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 11:07:30.385296 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:30.385300 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 11:07:30.385305 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 11:07:30.385310 | debian-bookworm | + 2026-06-02 11:07:30.385315 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 11:07:30.385320 | debian-bookworm | + 2026-06-02 11:07:30.385325 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 11:07:30.385329 | debian-bookworm | + 2026-06-02 11:07:30.385334 | debian-bookworm | +## Common Shells 2026-06-02 11:07:30.385339 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 11:07:30.385344 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 11:07:30.385349 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 11:07:30.385354 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 11:07:30.385359 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 11:07:30.385364 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 11:07:30.385369 | debian-bookworm | + 2026-06-02 11:07:30.385378 | debian-bookworm | +## Root command executions 2026-06-02 11:07:30.385383 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 11:07:30.385389 | debian-bookworm | + 2026-06-02 11:07:30.385394 | debian-bookworm | +## File Deletion Events by User 2026-06-02 11:07:30.385399 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 11:07:30.385404 | debian-bookworm | + 2026-06-02 11:07:30.385409 | debian-bookworm | +## File Access 2026-06-02 11:07:30.385414 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 11:07:30.385419 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 11:07:30.385426 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 11:07:30.385436 | debian-bookworm | + 2026-06-02 11:07:30.385442 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 11:07:30.385447 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 11:07:30.385452 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 11:07:30.385458 | debian-bookworm | + 2026-06-02 11:07:30.385544 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 11:07:30.385642 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 11:07:30.385737 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 11:07:30.385829 | debian-bookworm | + 2026-06-02 11:07:30.385925 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 11:07:30.386025 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 11:07:30.386120 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 11:07:30.386216 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 11:07:30.386324 | debian-bookworm | +### bit API. 2026-06-02 11:07:30.386421 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 11:07:30.386514 | debian-bookworm | + 2026-06-02 11:07:30.386612 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 11:07:30.386706 | debian-bookworm | + 2026-06-02 11:07:30.386800 | debian-bookworm | +##-e 2 2026-06-02 11:07:30.386892 | debian-bookworm | 2026-06-02 11:07:30.387146 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780398449.5092227-2550-170680450623346/.source.rules", "state": "file", "uid": 0} 2026-06-02 11:07:30.387225 | debian-bookworm | 2026-06-02 11:07:30.387336 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 11:07:31.137756 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ActiveEnterTimestampMonotonic": "3748117272", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:24 UTC", "AssertTimestampMonotonic": "3748044604", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "49293000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ConditionTimestampMonotonic": "3748044557", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2322", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ExecMainStartTimestampMonotonic": "3748089322", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2321 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2321 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2325 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2325 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:24 UTC", "InactiveExitTimestampMonotonic": "3748069829", "InvocationID": "3c0d466222f844cebc273538896b9ffd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2322", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 11:07:24 UTC", "StateChangeTimestampMonotonic": "3748117272", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:31.144437 | debian-bookworm | 2026-06-02 11:07:31.144552 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 11:07:31.558463 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008014", "end": "2026-06-02 11:07:31.511458", "msg": "", "rc": 0, "start": "2026-06-02 11:07:31.503444", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 11:07:31.558554 | debian-bookworm | 2026-06-02 11:07:31.558568 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 11:07:31.890777 | debian-bookworm | --- before 2026-06-02 11:07:31.890878 | debian-bookworm | +++ after 2026-06-02 11:07:31.890895 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 11:07:31.890908 | debian-bookworm | { 2026-06-02 11:07:31.890919 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 11:07:31.890933 | debian-bookworm | - "state": "file" 2026-06-02 11:07:31.890957 | debian-bookworm | + "state": "absent" 2026-06-02 11:07:31.890969 | debian-bookworm | } 2026-06-02 11:07:31.890980 | debian-bookworm | 2026-06-02 11:07:31.891053 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 11:07:31.891147 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 11:07:31.891233 | debian-bookworm | 2026-06-02 11:07:31.891357 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 11:07:31.784796 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 11:07:31.785707 | ubuntu-noble | audispd-plugins 2026-06-02 11:07:31.785731 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded. 2026-06-02 11:07:31.785927 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780398343, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (477 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (477 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 11:07:31.787820 | ubuntu-noble | 2026-06-02 11:07:31.787851 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 11:07:32.636573 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ActiveEnterTimestampMonotonic": "3748117272", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:24 UTC", "AssertTimestampMonotonic": "3748044604", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "50938000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ConditionTimestampMonotonic": "3748044557", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2322", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:24 UTC", "ExecMainStartTimestampMonotonic": "3748089322", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2321 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2321 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2325 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:24 UTC] ; stop_time=[Tue 2026-06-02 11:07:24 UTC] ; pid=2325 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:24 UTC", "InactiveExitTimestampMonotonic": "3748069829", "InvocationID": "3c0d466222f844cebc273538896b9ffd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2322", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 11:07:24 UTC", "StateChangeTimestampMonotonic": "3748117272", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:32.643832 | debian-bookworm | 2026-06-02 11:07:32.643989 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 11:07:33.047151 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.073652", "end": "2026-06-02 11:07:32.993443", "msg": "", "rc": 0, "start": "2026-06-02 11:07:32.919791", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2712\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1135\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2712\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 901\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2712", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1135", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2712", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 901", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 11:07:33.047207 | debian-bookworm | 2026-06-02 11:07:33.047355 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 11:07:33.097005 | ubuntu-noble | --- before 2026-06-02 11:07:33.097261 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-19402crxpd13/tmprpsaig0e/auditd.conf.j2 2026-06-02 11:07:33.097459 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 11:07:33.097635 | ubuntu-noble | +# 2026-06-02 11:07:33.097904 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 11:07:33.098070 | ubuntu-noble | +# 2026-06-02 11:07:33.098261 | ubuntu-noble | + 2026-06-02 11:07:33.098471 | ubuntu-noble | +local_events = yes 2026-06-02 11:07:33.098643 | ubuntu-noble | +write_logs = yes 2026-06-02 11:07:33.100032 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 11:07:33.100336 | ubuntu-noble | +log_group = adm 2026-06-02 11:07:33.100508 | ubuntu-noble | +log_format = RAW 2026-06-02 11:07:33.100671 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 11:07:33.100878 | ubuntu-noble | +freq = 50 2026-06-02 11:07:33.101054 | ubuntu-noble | +max_log_file = 8 2026-06-02 11:07:33.101210 | ubuntu-noble | +num_logs = 5 2026-06-02 11:07:33.101395 | ubuntu-noble | +priority_boost = 4 2026-06-02 11:07:33.101553 | ubuntu-noble | +disp_qos = lossy 2026-06-02 11:07:33.101712 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 11:07:33.101899 | ubuntu-noble | +name_format = NONE 2026-06-02 11:07:33.102053 | ubuntu-noble | +##name = mydomain 2026-06-02 11:07:33.102216 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 11:07:33.102449 | ubuntu-noble | +space_left = 12361 2026-06-02 11:07:33.102611 | ubuntu-noble | +space_left_action = email 2026-06-02 11:07:33.102795 | ubuntu-noble | +verify_email = yes 2026-06-02 11:07:33.103010 | ubuntu-noble | +action_mail_acct = root 2026-06-02 11:07:33.103164 | ubuntu-noble | +admin_space_left = 50 2026-06-02 11:07:33.103345 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 11:07:33.103509 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 11:07:33.103674 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 11:07:33.103853 | ubuntu-noble | +use_libwrap = yes 2026-06-02 11:07:33.104060 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 11:07:33.104218 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 11:07:33.104422 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 11:07:33.104586 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 11:07:33.104745 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 11:07:33.104910 | ubuntu-noble | +enable_krb5 = no 2026-06-02 11:07:33.105094 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 11:07:33.105236 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 11:07:33.105390 | ubuntu-noble | +distribute_network = no 2026-06-02 11:07:33.105519 | ubuntu-noble | 2026-06-02 11:07:33.105694 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780398451.8033152-2338-279648424794504/.source.conf", "state": "file", "uid": 0} 2026-06-02 11:07:33.106204 | ubuntu-noble | 2026-06-02 11:07:33.106438 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 11:07:33.791334 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:32 UTC", "ActiveEnterTimestampMonotonic": "3755787048", "ActiveExitTimestamp": "Tue 2026-06-02 11:07:32 UTC", "ActiveExitTimestampMonotonic": "3755571617", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:32 UTC", "AssertTimestampMonotonic": "3755619920", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "174249000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:32 UTC", "ConditionTimestampMonotonic": "3755619857", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2712", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:32 UTC", "ExecMainStartTimestampMonotonic": "3755670272", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:32 UTC] ; stop_time=[Tue 2026-06-02 11:07:32 UTC] ; pid=2710 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:32 UTC] ; stop_time=[Tue 2026-06-02 11:07:32 UTC] ; pid=2710 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:32 UTC] ; stop_time=[Tue 2026-06-02 11:07:32 UTC] ; pid=2715 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:32 UTC] ; stop_time=[Tue 2026-06-02 11:07:32 UTC] ; pid=2715 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 11:07:32 UTC", "InactiveEnterTimestampMonotonic": "3755613212", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:32 UTC", "InactiveExitTimestampMonotonic": "3755653360", "InvocationID": "f118daa8a43246c083d99c03af5abeaa", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2712", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2072576", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 11:07:32 UTC", "StateChangeTimestampMonotonic": "3755787048", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:33.793882 | debian-bookworm | 2026-06-02 11:07:33.793913 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 11:07:33.793920 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 11:07:33.793924 | debian-bookworm | 2026-06-02 11:07:33.904446 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 11:07:33.904988 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 11:07:33.567474 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 11:07:33.567571 | ubuntu-noble | 2026-06-02 11:07:33.567730 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 11:07:34.519864 | ubuntu-noble | --- before 2026-06-02 11:07:34.519929 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-19402crxpd13/tmp1dvyrgh_/20-neo23x0.rules.j2 2026-06-02 11:07:34.519938 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 11:07:34.519945 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 11:07:34.519952 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 11:07:34.519964 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 11:07:34.519972 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 11:07:34.520201 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 11:07:34.520304 | ubuntu-noble | +# 2026-06-02 11:07:34.520321 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 11:07:34.520456 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 11:07:34.520479 | ubuntu-noble | +# 2026-06-02 11:07:34.520586 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 11:07:34.520671 | ubuntu-noble | +# 2026-06-02 11:07:34.520804 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 11:07:34.522823 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 11:07:34.522853 | ubuntu-noble | +# 2026-06-02 11:07:34.522860 | ubuntu-noble | +# Based on rules published here: 2026-06-02 11:07:34.522866 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 11:07:34.523173 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 11:07:34.523507 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 11:07:34.523835 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 11:07:34.524089 | ubuntu-noble | +# Linux audit repo 2026-06-02 11:07:34.524393 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 11:07:34.524637 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 11:07:34.524931 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 11:07:34.525170 | ubuntu-noble | +# 2026-06-02 11:07:34.525399 | ubuntu-noble | +# Further rules 2026-06-02 11:07:34.525654 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 11:07:34.525942 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 11:07:34.526186 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 11:07:34.526459 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 11:07:34.526644 | ubuntu-noble | + 2026-06-02 11:07:34.526973 | ubuntu-noble | +# Remove any existing rules 2026-06-02 11:07:34.527267 | ubuntu-noble | +-D 2026-06-02 11:07:34.527537 | ubuntu-noble | + 2026-06-02 11:07:34.527815 | ubuntu-noble | +# Buffer Size 2026-06-02 11:07:34.528117 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 11:07:34.528833 | ubuntu-noble | +-b 8192 2026-06-02 11:07:34.528865 | ubuntu-noble | + 2026-06-02 11:07:34.528992 | ubuntu-noble | +# Failure Mode 2026-06-02 11:07:34.529295 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 11:07:34.529524 | ubuntu-noble | +-f 1 2026-06-02 11:07:34.529749 | ubuntu-noble | + 2026-06-02 11:07:34.530006 | ubuntu-noble | +# Ignore errors 2026-06-02 11:07:34.530263 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 11:07:34.530809 | ubuntu-noble | +-i 2026-06-02 11:07:34.530829 | ubuntu-noble | + 2026-06-02 11:07:34.530834 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 11:07:34.530867 | ubuntu-noble | + 2026-06-02 11:07:34.531009 | ubuntu-noble | +## Audit the audit logs 2026-06-02 11:07:34.531153 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 11:07:34.531343 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 11:07:34.531487 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 11:07:34.531618 | ubuntu-noble | + 2026-06-02 11:07:34.531753 | ubuntu-noble | +## Auditd configuration 2026-06-02 11:07:34.531900 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 11:07:34.532034 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 11:07:34.532162 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 11:07:34.532304 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 11:07:34.532424 | ubuntu-noble | + 2026-06-02 11:07:34.532552 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 11:07:34.532756 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 11:07:34.532907 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 11:07:34.533061 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 11:07:34.533189 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 11:07:34.534795 | ubuntu-noble | + 2026-06-02 11:07:34.534813 | ubuntu-noble | +## Access to all audit trails 2026-06-02 11:07:34.534817 | ubuntu-noble | + 2026-06-02 11:07:34.534821 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 11:07:34.534825 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 11:07:34.534829 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 11:07:34.534833 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 11:07:34.534836 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 11:07:34.534840 | ubuntu-noble | + 2026-06-02 11:07:34.534843 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 11:07:34.534847 | ubuntu-noble | + 2026-06-02 11:07:34.534851 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 11:07:34.534854 | ubuntu-noble | + 2026-06-02 11:07:34.534858 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 11:07:34.534964 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 11:07:34.535072 | ubuntu-noble | + 2026-06-02 11:07:34.535188 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 11:07:34.535346 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 11:07:34.535460 | ubuntu-noble | + 2026-06-02 11:07:34.535580 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 11:07:34.535696 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 11:07:34.535828 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 11:07:34.535941 | ubuntu-noble | + 2026-06-02 11:07:34.536056 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 11:07:34.536174 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 11:07:34.536328 | ubuntu-noble | + 2026-06-02 11:07:34.536508 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 11:07:34.536640 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 11:07:34.536747 | ubuntu-noble | + 2026-06-02 11:07:34.536881 | ubuntu-noble | +## Open VM Tools 2026-06-02 11:07:34.537009 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 11:07:34.537118 | ubuntu-noble | + 2026-06-02 11:07:34.537286 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 11:07:34.537452 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 11:07:34.537572 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 11:07:34.537720 | ubuntu-noble | + 2026-06-02 11:07:34.537863 | ubuntu-noble | +## FileBeat 2026-06-02 11:07:34.537991 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 11:07:34.538145 | ubuntu-noble | + 2026-06-02 11:07:34.538353 | ubuntu-noble | +## More information on how to filter events 2026-06-02 11:07:34.538537 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 11:07:34.538711 | ubuntu-noble | + 2026-06-02 11:07:34.538926 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 11:07:34.539122 | ubuntu-noble | + 2026-06-02 11:07:34.539330 | ubuntu-noble | +## Kernel parameters 2026-06-02 11:07:34.539466 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 11:07:34.539613 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 11:07:34.539727 | ubuntu-noble | + 2026-06-02 11:07:34.539861 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 11:07:34.539986 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 11:07:34.540102 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 11:07:34.540218 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 11:07:34.540382 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 11:07:34.540527 | ubuntu-noble | + 2026-06-02 11:07:34.540709 | ubuntu-noble | +## Modprobe configuration 2026-06-02 11:07:34.540926 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 11:07:34.541119 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 11:07:34.541320 | ubuntu-noble | + 2026-06-02 11:07:34.541512 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 11:07:34.541707 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 11:07:34.541940 | ubuntu-noble | + 2026-06-02 11:07:34.542133 | ubuntu-noble | +## Special files 2026-06-02 11:07:34.542414 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 11:07:34.542614 | ubuntu-noble | + 2026-06-02 11:07:34.542826 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 11:07:34.543017 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 11:07:34.543178 | ubuntu-noble | + 2026-06-02 11:07:34.543368 | ubuntu-noble | +### NFS mount 2026-06-02 11:07:34.543560 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.543763 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.543951 | ubuntu-noble | + 2026-06-02 11:07:34.544110 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 11:07:34.544275 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 11:07:34.545803 | ubuntu-noble | + 2026-06-02 11:07:34.545824 | ubuntu-noble | +## Time 2026-06-02 11:07:34.545837 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 11:07:34.545842 | ubuntu-noble | +### Local time zone 2026-06-02 11:07:34.545846 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 11:07:34.545849 | ubuntu-noble | + 2026-06-02 11:07:34.545855 | ubuntu-noble | +## Stunnel 2026-06-02 11:07:34.545862 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 11:07:34.545867 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 11:07:34.545870 | ubuntu-noble | + 2026-06-02 11:07:34.545874 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 11:07:34.545877 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 11:07:34.545881 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 11:07:34.545945 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 11:07:34.546096 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 11:07:34.546259 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 11:07:34.546381 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 11:07:34.546494 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 11:07:34.546643 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 11:07:34.546762 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 11:07:34.546933 | ubuntu-noble | + 2026-06-02 11:07:34.547060 | ubuntu-noble | +## User, group, password databases 2026-06-02 11:07:34.547173 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 11:07:34.547304 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 11:07:34.547419 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 11:07:34.547530 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 11:07:34.547643 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 11:07:34.547751 | ubuntu-noble | + 2026-06-02 11:07:34.547901 | ubuntu-noble | +## Sudoers file changes 2026-06-02 11:07:34.548032 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 11:07:34.548195 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 11:07:34.548351 | ubuntu-noble | + 2026-06-02 11:07:34.548487 | ubuntu-noble | +## Passwd 2026-06-02 11:07:34.548662 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 11:07:34.548944 | ubuntu-noble | + 2026-06-02 11:07:34.549075 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 11:07:34.549193 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 11:07:34.549334 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 11:07:34.549451 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 11:07:34.549567 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 11:07:34.549714 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 11:07:34.549912 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 11:07:34.550035 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 11:07:34.550155 | ubuntu-noble | + 2026-06-02 11:07:34.550355 | ubuntu-noble | +## Login configuration and information 2026-06-02 11:07:34.550504 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 11:07:34.550682 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 11:07:34.550826 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 11:07:34.550991 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 11:07:34.551161 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 11:07:34.551300 | ubuntu-noble | + 2026-06-02 11:07:34.551419 | ubuntu-noble | +## Network Environment 2026-06-02 11:07:34.551533 | ubuntu-noble | +### Changes to hostname 2026-06-02 11:07:34.551734 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 11:07:34.551968 | ubuntu-noble | + 2026-06-02 11:07:34.552176 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 11:07:34.552453 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 11:07:34.552666 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 11:07:34.552879 | ubuntu-noble | + 2026-06-02 11:07:34.553082 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 11:07:34.553217 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 11:07:34.553351 | ubuntu-noble | + 2026-06-02 11:07:34.553466 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 11:07:34.553581 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 11:07:34.553693 | ubuntu-noble | + 2026-06-02 11:07:34.553952 | ubuntu-noble | +### Changes to other files 2026-06-02 11:07:34.554357 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 11:07:34.554513 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 11:07:34.554755 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 11:07:34.555040 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 11:07:34.555298 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 11:07:34.555481 | ubuntu-noble | + 2026-06-02 11:07:34.555812 | ubuntu-noble | +### Changes to issue 2026-06-02 11:07:34.555872 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 11:07:34.556045 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 11:07:34.556804 | ubuntu-noble | + 2026-06-02 11:07:34.556828 | ubuntu-noble | +## System startup scripts 2026-06-02 11:07:34.556835 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 11:07:34.557054 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 11:07:34.557183 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 11:07:34.557338 | ubuntu-noble | + 2026-06-02 11:07:34.557492 | ubuntu-noble | +## Library search paths 2026-06-02 11:07:34.557651 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 11:07:34.557854 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 11:07:34.558029 | ubuntu-noble | + 2026-06-02 11:07:34.558380 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 11:07:34.558844 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 11:07:34.558861 | ubuntu-noble | + 2026-06-02 11:07:34.558865 | ubuntu-noble | +## Pam configuration 2026-06-02 11:07:34.559076 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 11:07:34.559503 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 11:07:34.559521 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 11:07:34.559639 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 11:07:34.559760 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 11:07:34.560741 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 11:07:34.560800 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 11:07:34.560806 | ubuntu-noble | + 2026-06-02 11:07:34.560811 | ubuntu-noble | +## Mail configuration 2026-06-02 11:07:34.560814 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 11:07:34.560818 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 11:07:34.560834 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 11:07:34.560837 | ubuntu-noble | + 2026-06-02 11:07:34.560844 | ubuntu-noble | +## SSH configuration 2026-06-02 11:07:34.561007 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 11:07:34.561884 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 11:07:34.562109 | ubuntu-noble | + 2026-06-02 11:07:34.562280 | ubuntu-noble | +## root ssh key tampering 2026-06-02 11:07:34.562448 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 11:07:34.562574 | ubuntu-noble | + 2026-06-02 11:07:34.562696 | ubuntu-noble | +# Systemd 2026-06-02 11:07:34.562850 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 11:07:34.562969 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 11:07:34.563083 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 11:07:34.563195 | ubuntu-noble | + 2026-06-02 11:07:34.563337 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 11:07:34.563475 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:34.563595 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:34.563719 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 11:07:34.563885 | ubuntu-noble | + 2026-06-02 11:07:34.564009 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 11:07:34.564126 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 11:07:34.564265 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 11:07:34.564379 | ubuntu-noble | + 2026-06-02 11:07:34.564500 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 11:07:34.564614 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 11:07:34.564723 | ubuntu-noble | + 2026-06-02 11:07:34.564865 | ubuntu-noble | +## Critical elements access failures 2026-06-02 11:07:34.564991 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.565109 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566807 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566826 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566830 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566834 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566838 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566841 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 11:07:34.566845 | ubuntu-noble | + 2026-06-02 11:07:34.566850 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 11:07:34.566853 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 11:07:34.566857 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 11:07:34.566861 | ubuntu-noble | + 2026-06-02 11:07:34.566865 | ubuntu-noble | +## Power state 2026-06-02 11:07:34.566869 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 11:07:34.566873 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 11:07:34.566876 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 11:07:34.566880 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 11:07:34.566960 | ubuntu-noble | + 2026-06-02 11:07:34.567076 | ubuntu-noble | +## Session initiation information 2026-06-02 11:07:34.567189 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 11:07:34.567338 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 11:07:34.567453 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 11:07:34.567563 | ubuntu-noble | + 2026-06-02 11:07:34.567679 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 11:07:34.567820 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.567953 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568074 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568193 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568327 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568452 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568572 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568703 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568858 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.568986 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.569104 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.569224 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.569359 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 11:07:34.569468 | ubuntu-noble | + 2026-06-02 11:07:34.569582 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 11:07:34.569692 | ubuntu-noble | + 2026-06-02 11:07:34.569843 | ubuntu-noble | +## Reconnaissance 2026-06-02 11:07:34.569967 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 11:07:34.570084 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 11:07:34.570199 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 11:07:34.570365 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 11:07:34.570483 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 11:07:34.570596 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 11:07:34.570706 | ubuntu-noble | + 2026-06-02 11:07:34.570847 | ubuntu-noble | +## Suspicious activity 2026-06-02 11:07:34.570970 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 11:07:34.571088 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 11:07:34.571206 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 11:07:34.571340 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 11:07:34.571455 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 11:07:34.571570 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 11:07:34.571684 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 11:07:34.571819 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 11:07:34.571941 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 11:07:34.572056 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 11:07:34.572171 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 11:07:34.572298 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 11:07:34.572503 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 11:07:34.572622 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 11:07:34.572748 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 11:07:34.572879 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 11:07:34.573002 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 11:07:34.573127 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 11:07:34.573259 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 11:07:34.573376 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 11:07:34.573493 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 11:07:34.573608 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 11:07:34.573716 | ubuntu-noble | + 2026-06-02 11:07:34.573843 | ubuntu-noble | +## sssd 2026-06-02 11:07:34.573979 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.574103 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.574224 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.574401 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.574528 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.574638 | ubuntu-noble | + 2026-06-02 11:07:34.574752 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 11:07:34.574879 | ubuntu-noble | + 2026-06-02 11:07:34.575002 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 11:07:34.575126 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 11:07:34.575262 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 11:07:34.575382 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 11:07:34.575490 | ubuntu-noble | + 2026-06-02 11:07:34.575607 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 11:07:34.575724 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 11:07:34.575849 | ubuntu-noble | + 2026-06-02 11:07:34.575969 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 11:07:34.576086 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 11:07:34.576194 | ubuntu-noble | + 2026-06-02 11:07:34.576348 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 11:07:34.576468 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 11:07:34.576578 | ubuntu-noble | + 2026-06-02 11:07:34.576695 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 11:07:34.576828 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 11:07:34.576941 | ubuntu-noble | + 2026-06-02 11:07:34.577056 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 11:07:34.577184 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 11:07:34.577308 | ubuntu-noble | + 2026-06-02 11:07:34.577432 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 11:07:34.577545 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 11:07:34.577651 | ubuntu-noble | + 2026-06-02 11:07:34.577764 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 11:07:34.577897 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 11:07:34.578009 | ubuntu-noble | + 2026-06-02 11:07:34.578131 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 11:07:34.578262 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 11:07:34.578381 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 11:07:34.578498 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 11:07:34.578605 | ubuntu-noble | + 2026-06-02 11:07:34.578722 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 11:07:34.578854 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 11:07:34.580806 | ubuntu-noble | + 2026-06-02 11:07:34.580825 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 11:07:34.580829 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 11:07:34.580833 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 11:07:34.580837 | ubuntu-noble | + 2026-06-02 11:07:34.580840 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 11:07:34.580844 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 11:07:34.580847 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 11:07:34.580851 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 11:07:34.580854 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 11:07:34.580858 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 11:07:34.580861 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 11:07:34.580865 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 11:07:34.580868 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 11:07:34.580871 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 11:07:34.580875 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 11:07:34.580878 | ubuntu-noble | + 2026-06-02 11:07:34.580882 | ubuntu-noble | +### kde4 2026-06-02 11:07:34.580886 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.581015 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 11:07:34.581125 | ubuntu-noble | + 2026-06-02 11:07:34.581251 | ubuntu-noble | +## dbus-send invocation 2026-06-02 11:07:34.581373 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 11:07:34.581487 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 11:07:34.581601 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 11:07:34.581709 | ubuntu-noble | + 2026-06-02 11:07:34.581839 | ubuntu-noble | +## pkexec invocation 2026-06-02 11:07:34.581961 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 11:07:34.582072 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 11:07:34.582178 | ubuntu-noble | + 2026-06-02 11:07:34.582326 | ubuntu-noble | +## Suspicious shells 2026-06-02 11:07:34.582443 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 11:07:34.582556 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 11:07:34.582668 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 11:07:34.582806 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 11:07:34.582930 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 11:07:34.583044 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 11:07:34.583159 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 11:07:34.583303 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 11:07:34.583422 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 11:07:34.583529 | ubuntu-noble | + 2026-06-02 11:07:34.583644 | ubuntu-noble | +# Web Server Actvity 2026-06-02 11:07:34.583764 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 11:07:34.583905 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 11:07:34.584014 | ubuntu-noble | + 2026-06-02 11:07:34.584130 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 11:07:34.584261 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 11:07:34.584389 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 11:07:34.584519 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 11:07:34.584640 | ubuntu-noble | + 2026-06-02 11:07:34.584756 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 11:07:34.584890 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 11:07:34.585010 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 11:07:34.585118 | ubuntu-noble | + 2026-06-02 11:07:34.585262 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 11:07:34.585385 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 11:07:34.585499 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 11:07:34.585614 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 11:07:34.585729 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 11:07:34.585888 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 11:07:34.586017 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 11:07:34.586129 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 11:07:34.586269 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 11:07:34.586383 | ubuntu-noble | + 2026-06-02 11:07:34.586498 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 11:07:34.586611 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 11:07:34.586724 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 11:07:34.586856 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 11:07:34.586968 | ubuntu-noble | + 2026-06-02 11:07:34.587081 | ubuntu-noble | +## Injection 2026-06-02 11:07:34.587197 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 11:07:34.587350 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 11:07:34.587471 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 11:07:34.587588 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 11:07:34.587702 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 11:07:34.587834 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 11:07:34.587946 | ubuntu-noble | + 2026-06-02 11:07:34.588058 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 11:07:34.588171 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 11:07:34.588303 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 11:07:34.588423 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 11:07:34.588540 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 11:07:34.588646 | ubuntu-noble | + 2026-06-02 11:07:34.588760 | ubuntu-noble | +## Privilege Abuse 2026-06-02 11:07:34.588894 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 11:07:34.589017 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 11:07:34.589125 | ubuntu-noble | + 2026-06-02 11:07:34.589272 | ubuntu-noble | +# Socket Creations 2026-06-02 11:07:34.589406 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 11:07:34.589518 | ubuntu-noble | + 2026-06-02 11:07:34.589638 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 11:07:34.589755 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 11:07:34.589884 | ubuntu-noble | + 2026-06-02 11:07:34.590006 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 11:07:34.590122 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 11:07:34.590228 | ubuntu-noble | + 2026-06-02 11:07:34.590359 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 11:07:34.590471 | ubuntu-noble | + 2026-06-02 11:07:34.590587 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 11:07:34.590703 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 11:07:34.590846 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 11:07:34.590960 | ubuntu-noble | + 2026-06-02 11:07:34.591073 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 11:07:34.591186 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 11:07:34.591328 | ubuntu-noble | + 2026-06-02 11:07:34.591445 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 11:07:34.591561 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 11:07:34.591677 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 11:07:34.591809 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 11:07:34.591964 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 11:07:34.592077 | ubuntu-noble | + 2026-06-02 11:07:34.592191 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 11:07:34.592322 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 11:07:34.592435 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 11:07:34.592551 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 11:07:34.592665 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 11:07:34.592813 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 11:07:34.592938 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 11:07:34.593055 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 11:07:34.593162 | ubuntu-noble | + 2026-06-02 11:07:34.593315 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 11:07:34.593434 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 11:07:34.593550 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 11:07:34.593666 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 11:07:34.593801 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 11:07:34.593924 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 11:07:34.594041 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 11:07:34.594150 | ubuntu-noble | + 2026-06-02 11:07:34.594276 | ubuntu-noble | +# npm 2026-06-02 11:07:34.594798 | ubuntu-noble | +## T1072 third party software 2026-06-02 11:07:34.594809 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 11:07:34.594813 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 11:07:34.594817 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 11:07:34.594821 | ubuntu-noble | + 2026-06-02 11:07:34.594927 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 11:07:34.595044 | ubuntu-noble | +## T1072 third party software 2026-06-02 11:07:34.595176 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 11:07:34.595337 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 11:07:34.595450 | ubuntu-noble | + 2026-06-02 11:07:34.595565 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 11:07:34.595679 | ubuntu-noble | +## T1072 third party software 2026-06-02 11:07:34.595811 | ubuntu-noble | +## https://rubygems.org 2026-06-02 11:07:34.595936 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 11:07:34.596059 | ubuntu-noble | + 2026-06-02 11:07:34.596176 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 11:07:34.596329 | ubuntu-noble | +## T1072 third party software 2026-06-02 11:07:34.596444 | ubuntu-noble | +## https://luarocks.org 2026-06-02 11:07:34.596560 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 11:07:34.596670 | ubuntu-noble | + 2026-06-02 11:07:34.596802 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 11:07:34.596928 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 11:07:34.597042 | ubuntu-noble | +## T1072 third party software 2026-06-02 11:07:34.597157 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 11:07:34.597297 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 11:07:34.597408 | ubuntu-noble | + 2026-06-02 11:07:34.597522 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 11:07:34.597631 | ubuntu-noble | + 2026-06-02 11:07:34.597745 | ubuntu-noble | +## GDS specific secrets 2026-06-02 11:07:34.597875 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 11:07:34.599813 | ubuntu-noble | + 2026-06-02 11:07:34.599844 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 11:07:34.599852 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 11:07:34.599859 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 11:07:34.599865 | ubuntu-noble | + 2026-06-02 11:07:34.599871 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 11:07:34.599877 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 11:07:34.599882 | ubuntu-noble | + 2026-06-02 11:07:34.599889 | ubuntu-noble | +## Salt 2026-06-02 11:07:34.599895 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 11:07:34.599902 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 11:07:34.599908 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 11:07:34.599914 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 11:07:34.599920 | ubuntu-noble | + 2026-06-02 11:07:34.599926 | ubuntu-noble | +## Otter 2026-06-02 11:07:34.599933 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 11:07:34.600096 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 11:07:34.600277 | ubuntu-noble | + 2026-06-02 11:07:34.600405 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 11:07:34.600580 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 11:07:34.600765 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 11:07:34.600976 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 11:07:34.601146 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.601336 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 11:07:34.601510 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 11:07:34.601676 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 11:07:34.601862 | ubuntu-noble | + 2026-06-02 11:07:34.602039 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 11:07:34.602219 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 11:07:34.602449 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.602644 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 11:07:34.602841 | ubuntu-noble | + 2026-06-02 11:07:34.603068 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 11:07:34.603289 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 11:07:34.603475 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.603663 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 11:07:34.603851 | ubuntu-noble | + 2026-06-02 11:07:34.604035 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 11:07:34.604202 | ubuntu-noble | + 2026-06-02 11:07:34.604395 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 11:07:34.604579 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.604762 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 11:07:34.604953 | ubuntu-noble | + 2026-06-02 11:07:34.605135 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 11:07:34.605362 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 11:07:34.605546 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.605722 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 11:07:34.605910 | ubuntu-noble | + 2026-06-02 11:07:34.606091 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 11:07:34.606289 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 11:07:34.606442 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.606642 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 11:07:34.606822 | ubuntu-noble | + 2026-06-02 11:07:34.606992 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 11:07:34.607109 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 11:07:34.607223 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.607440 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 11:07:34.607626 | ubuntu-noble | + 2026-06-02 11:07:34.607851 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 11:07:34.608047 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 11:07:34.608220 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.608390 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 11:07:34.608553 | ubuntu-noble | + 2026-06-02 11:07:34.608730 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 11:07:34.608940 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 11:07:34.609127 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.609296 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 11:07:34.609412 | ubuntu-noble | + 2026-06-02 11:07:34.609531 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 11:07:34.609665 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 11:07:34.609838 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 11:07:34.609967 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 11:07:34.610083 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 11:07:34.610195 | ubuntu-noble | +### macOS 2026-06-02 11:07:34.610336 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 11:07:34.610447 | ubuntu-noble | + 2026-06-02 11:07:34.610558 | ubuntu-noble | +## Docker 2026-06-02 11:07:34.610672 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 11:07:34.610862 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 11:07:34.611041 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 11:07:34.611161 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 11:07:34.611294 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 11:07:34.611408 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 11:07:34.611540 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 11:07:34.611693 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 11:07:34.613820 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 11:07:34.613859 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 11:07:34.613864 | ubuntu-noble | + 2026-06-02 11:07:34.613868 | ubuntu-noble | +## Virtualization stuff 2026-06-02 11:07:34.613872 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 11:07:34.613878 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 11:07:34.613884 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 11:07:34.613890 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 11:07:34.613896 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 11:07:34.613901 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 11:07:34.613907 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 11:07:34.613913 | ubuntu-noble | + 2026-06-02 11:07:34.613918 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 11:07:34.613923 | ubuntu-noble | + 2026-06-02 11:07:34.613928 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 11:07:34.613934 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 11:07:34.613939 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 11:07:34.613944 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 11:07:34.613950 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 11:07:34.614167 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 11:07:34.614356 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 11:07:34.614483 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 11:07:34.614658 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 11:07:34.614812 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 11:07:34.614999 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 11:07:34.615175 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 11:07:34.615394 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 11:07:34.615576 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 11:07:34.615704 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 11:07:34.615858 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 11:07:34.616033 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 11:07:34.616199 | ubuntu-noble | + 2026-06-02 11:07:34.616431 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 11:07:34.616589 | ubuntu-noble | + 2026-06-02 11:07:34.616717 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 11:07:34.616918 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 11:07:34.617290 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 11:07:34.617557 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 11:07:34.617798 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 11:07:34.618022 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 11:07:34.618171 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 11:07:34.618317 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 11:07:34.618436 | ubuntu-noble | + 2026-06-02 11:07:34.618554 | ubuntu-noble | +### qemu on macOS 2026-06-02 11:07:34.618662 | ubuntu-noble | + 2026-06-02 11:07:34.618799 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 11:07:34.618922 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 11:07:34.619040 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 11:07:34.619155 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 11:07:34.619317 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 11:07:34.619500 | ubuntu-noble | + 2026-06-02 11:07:34.619686 | ubuntu-noble | +## Kubelet 2026-06-02 11:07:34.619890 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 11:07:34.620066 | ubuntu-noble | + 2026-06-02 11:07:34.620293 | ubuntu-noble | +# ipc system call 2026-06-02 11:07:34.620472 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 11:07:34.620644 | ubuntu-noble | + 2026-06-02 11:07:34.620848 | ubuntu-noble | +## msgctl 2026-06-02 11:07:34.621048 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 11:07:34.621257 | ubuntu-noble | +## msgget 2026-06-02 11:07:34.621455 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 11:07:34.621669 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:34.621883 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 11:07:34.622076 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 11:07:34.622297 | ubuntu-noble | + 2026-06-02 11:07:34.622478 | ubuntu-noble | +## semctl 2026-06-02 11:07:34.622667 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 11:07:34.622860 | ubuntu-noble | +## semget 2026-06-02 11:07:34.623052 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 11:07:34.623215 | ubuntu-noble | +## semop 2026-06-02 11:07:34.623434 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 11:07:34.623607 | ubuntu-noble | +## semtimedop 2026-06-02 11:07:34.623810 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 11:07:34.624011 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:34.624194 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 11:07:34.624392 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 11:07:34.624571 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 11:07:34.624752 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 11:07:34.624949 | ubuntu-noble | + 2026-06-02 11:07:34.625124 | ubuntu-noble | +## shmctl 2026-06-02 11:07:34.625326 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 11:07:34.625495 | ubuntu-noble | +## shmget 2026-06-02 11:07:34.625674 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 11:07:34.625875 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 11:07:34.626067 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 11:07:34.626290 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 11:07:34.626482 | ubuntu-noble | + 2026-06-02 11:07:34.627810 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 11:07:34.627836 | ubuntu-noble | + 2026-06-02 11:07:34.627842 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 11:07:34.627848 | ubuntu-noble | + 2026-06-02 11:07:34.627854 | ubuntu-noble | +## Common Shells 2026-06-02 11:07:34.627860 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 11:07:34.627866 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 11:07:34.627871 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 11:07:34.627967 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 11:07:34.628148 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 11:07:34.628381 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 11:07:34.628565 | ubuntu-noble | + 2026-06-02 11:07:34.628738 | ubuntu-noble | +## Root command executions 2026-06-02 11:07:34.628949 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 11:07:34.629119 | ubuntu-noble | + 2026-06-02 11:07:34.629318 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 11:07:34.629504 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 11:07:34.629663 | ubuntu-noble | + 2026-06-02 11:07:34.629850 | ubuntu-noble | +## File Access 2026-06-02 11:07:34.630032 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 11:07:34.630280 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 11:07:34.630504 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 11:07:34.630686 | ubuntu-noble | + 2026-06-02 11:07:34.630901 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 11:07:34.631101 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 11:07:34.631309 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 11:07:34.631484 | ubuntu-noble | + 2026-06-02 11:07:34.631647 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 11:07:34.631854 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 11:07:34.632058 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 11:07:34.632217 | ubuntu-noble | + 2026-06-02 11:07:34.632453 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 11:07:34.632638 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 11:07:34.632847 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 11:07:34.633038 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 11:07:34.633213 | ubuntu-noble | +### bit API. 2026-06-02 11:07:34.633421 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 11:07:34.633580 | ubuntu-noble | + 2026-06-02 11:07:34.633755 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 11:07:34.633965 | ubuntu-noble | + 2026-06-02 11:07:34.634154 | ubuntu-noble | +##-e 2 2026-06-02 11:07:34.634336 | ubuntu-noble | 2026-06-02 11:07:34.634683 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780398453.5968456-2416-253345790519071/.source.rules", "state": "file", "uid": 0} 2026-06-02 11:07:34.634910 | ubuntu-noble | 2026-06-02 11:07:34.635115 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 11:07:35.412956 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ActiveEnterTimestampMonotonic": "3747561377", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:27 UTC", "AssertTimestampMonotonic": "3747508168", "Before": "ssh.service systemd-update-utmp.service sysinit.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40821000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ConditionTimestampMonotonic": "3747508099", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2185", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ExecMainStartTimestampMonotonic": "3747523887", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2184 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2184 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:27 UTC", "InactiveExitTimestampMonotonic": "3747513347", "InvocationID": "55c6fafcc47c41f7a2a02c77f10d7fb2", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2185", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3511287808", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2199552", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 11:07:27 UTC", "StateChangeTimestampMonotonic": "3747561377", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:35.422875 | ubuntu-noble | 2026-06-02 11:07:35.422932 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 11:07:35.881017 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008842", "end": "2026-06-02 11:07:35.835719", "msg": "", "rc": 0, "start": "2026-06-02 11:07:35.826877", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 11:07:35.881095 | ubuntu-noble | 2026-06-02 11:07:35.881201 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 11:07:36.262831 | ubuntu-noble | --- before 2026-06-02 11:07:36.262885 | ubuntu-noble | +++ after 2026-06-02 11:07:36.262891 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 11:07:36.262897 | ubuntu-noble | { 2026-06-02 11:07:36.262902 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 11:07:36.262908 | ubuntu-noble | - "state": "file" 2026-06-02 11:07:36.262914 | ubuntu-noble | + "state": "absent" 2026-06-02 11:07:36.262918 | ubuntu-noble | } 2026-06-02 11:07:36.262924 | ubuntu-noble | 2026-06-02 11:07:36.262931 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 11:07:36.263100 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 11:07:36.263363 | ubuntu-noble | 2026-06-02 11:07:36.263537 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 11:07:36.937284 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ActiveEnterTimestampMonotonic": "3747561377", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:27 UTC", "AssertTimestampMonotonic": "3747508168", "Before": "ssh.service systemd-update-utmp.service sysinit.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "41895000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ConditionTimestampMonotonic": "3747508099", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2185", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:27 UTC", "ExecMainStartTimestampMonotonic": "3747523887", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2184 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2184 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:27 UTC] ; stop_time=[Tue 2026-06-02 11:07:27 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:27 UTC", "InactiveExitTimestampMonotonic": "3747513347", "InvocationID": "55c6fafcc47c41f7a2a02c77f10d7fb2", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2185", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3524378624", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2199552", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 11:07:27 UTC", "StateChangeTimestampMonotonic": "3747561377", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:36.941984 | ubuntu-noble | 2026-06-02 11:07:36.942285 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 11:07:37.296389 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.062368", "end": "2026-06-02 11:07:37.252027", "msg": "", "rc": 0, "start": "2026-06-02 11:07:37.189659", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2578\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 523\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2578\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 518\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2578", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 523", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2578", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 518", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 11:07:37.296838 | ubuntu-noble | 2026-06-02 11:07:37.297154 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 11:07:37.999655 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 11:07:36 UTC", "ActiveEnterTimestampMonotonic": "3757237651", "ActiveExitTimestamp": "Tue 2026-06-02 11:07:36 UTC", "ActiveExitTimestampMonotonic": "3757109334", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 11:07:36 UTC", "AssertTimestampMonotonic": "3757146206", "Before": "ssh.service systemd-update-utmp.service sysinit.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "123298000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 11:07:36 UTC", "ConditionTimestampMonotonic": "3757146147", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2578", "ExecMainStartTimestamp": "Tue 2026-06-02 11:07:36 UTC", "ExecMainStartTimestampMonotonic": "3757175382", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 11:07:36 UTC] ; stop_time=[Tue 2026-06-02 11:07:36 UTC] ; pid=2576 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 11:07:36 UTC] ; stop_time=[Tue 2026-06-02 11:07:36 UTC] ; pid=2576 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 11:07:36 UTC] ; stop_time=[Tue 2026-06-02 11:07:36 UTC] ; pid=2582 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 11:07:36 UTC] ; stop_time=[Tue 2026-06-02 11:07:36 UTC] ; pid=2582 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 11:07:36 UTC", "InactiveEnterTimestampMonotonic": "3757145311", "InactiveExitTimestamp": "Tue 2026-06-02 11:07:36 UTC", "InactiveExitTimestampMonotonic": "3757149640", "InvocationID": "d1136811834a4baca886f271461a5b56", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2578", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3536891904", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2121728", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 11:07:36 UTC", "StateChangeTimestampMonotonic": "3757237651", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 11:07:38.000615 | ubuntu-noble | 2026-06-02 11:07:38.001171 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 11:07:38.001722 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 11:07:38.002115 | ubuntu-noble | 2026-06-02 11:07:38.072403 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 11:07:38.073896 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 11:07:38.575305 | debian-bookworm | ok: Runtime: 0:00:16.475446 2026-06-02 11:07:38.607473 | ubuntu-noble | ok: Runtime: 0:00:20.571931 2026-06-02 11:07:38.641834 | 2026-06-02 11:07:38.642060 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 11:07:39.370086 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:39.383972 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:39.373578 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 11:07:39.385488 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:39.885021 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:39.885681 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:39.905970 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:39.911515 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 11:07:39.911610 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:39.868011 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 11:07:39.868614 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 11:07:39.895110 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 11:07:39.902902 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 11:07:39.902973 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 11:07:41.442632 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 11:07:41.444451 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 11:07:41.445961 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:41.445984 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:41.445994 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:41.446002 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:41.446008 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:41.446015 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 11:07:41.446021 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:41.446027 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:41.446033 | debian-bookworm | 2026-06-02 11:07:41.446160 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:41.446169 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 11:07:41.446175 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:41.446181 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:41.446187 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:41.446194 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:41.446200 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:41.446206 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:41.446226 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:41.446234 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:41.446241 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:41.446247 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:41.446253 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:41.446259 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:41.446265 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:41.446271 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:41.446278 | debian-bookworm | 2026-06-02 11:07:41.446434 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:41.342098 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 11:07:41.343913 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 11:07:41.345245 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 11:07:41.345273 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 11:07:41.345288 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 11:07:41.345300 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 11:07:41.345310 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 11:07:41.345319 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 11:07:41.345329 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 11:07:41.345338 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 11:07:41.345349 | ubuntu-noble | 2026-06-02 11:07:41.345486 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 11:07:41.345501 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 11:07:41.345511 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 11:07:41.345520 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 11:07:41.345529 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 11:07:41.345539 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 11:07:41.345548 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 11:07:41.345558 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 11:07:41.345567 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 11:07:41.345577 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 11:07:41.345587 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 11:07:41.345596 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 11:07:41.345606 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 11:07:41.345616 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 11:07:41.345625 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 11:07:41.345634 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:41.345644 | ubuntu-noble | 2026-06-02 11:07:41.345672 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 11:07:41.611988 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 11:07:41.625645 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 11:07:41.627801 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 11:07:41.627821 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 11:07:41.627827 | ubuntu-noble | registered third-party plugins: 2026-06-02 11:07:41.627832 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 11:07:41.627837 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 11:07:41.627889 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 11:07:41.695503 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 11:07:41.710418 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 11:07:41.710849 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 11:07:41.711324 | debian-bookworm | using: pytest-8.4.2 2026-06-02 11:07:41.711698 | debian-bookworm | registered third-party plugins: 2026-06-02 11:07:41.712621 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 11:07:41.713107 | debian-bookworm | rootdir: /home/zuul 2026-06-02 11:07:41.713537 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 11:07:42.663538 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 11:07:42.663614 | ubuntu-noble | 2026-06-02 11:07:42.737204 | debian-bookworm | collecting ... collected 6 items 2026-06-02 11:07:42.737376 | debian-bookworm | 2026-06-02 11:07:47.103095 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 11:07:47.153196 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 11:07:47.139610 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 11:07:47.177709 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 11:07:49.658776 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 11:07:49.561581 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 11:07:54.647361 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 11:07:54.379151 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 11:07:55.943627 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 11:07:56.025691 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 11:07:56.026106 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 11:07:56.026227 | debian-bookworm | 2026-06-02 11:07:56.026363 | debian-bookworm | ============================== 6 passed in 14.27s ============================== 2026-06-02 11:07:56.072645 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 11:07:56.073054 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 11:07:56.073919 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 11:07:55.779542 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 11:07:55.857581 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 11:07:55.860328 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 11:07:55.860412 | ubuntu-noble | 2026-06-02 11:07:55.860734 | ubuntu-noble | ============================== 6 passed in 14.18s ============================== 2026-06-02 11:07:55.925871 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 11:07:55.925958 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 11:07:55.925977 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 11:07:56.220585 | ubuntu-noble | ok: Runtime: 0:00:16.957968 2026-06-02 11:07:56.226626 | debian-bookworm | ok: Runtime: 0:00:17.143774 2026-06-02 11:07:56.233612 | 2026-06-02 11:07:56.233738 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 11:07:56.791497 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:07:56.792188 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:07:56.804540 | 2026-06-02 11:07:56.804640 | PLAY RECAP 2026-06-02 11:07:56.804720 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 11:07:56.804753 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 11:07:56.804773 | 2026-06-02 11:07:56.956352 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 11:07:56.958002 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 11:07:57.713891 | 2026-06-02 11:07:57.714078 | PLAY [Collect container logs] 2026-06-02 11:07:57.732082 | 2026-06-02 11:07:57.732272 | TASK [Create container log directory] 2026-06-02 11:07:58.411413 | ubuntu-noble | changed 2026-06-02 11:07:58.420992 | debian-bookworm | changed 2026-06-02 11:07:58.428666 | 2026-06-02 11:07:58.428861 | TASK [Capture container overview] 2026-06-02 11:07:58.989231 | debian-bookworm | ok: Runtime: 0:00:00.010822 2026-06-02 11:07:59.033624 | ubuntu-noble | ok: Runtime: 0:00:00.012912 2026-06-02 11:07:59.043334 | 2026-06-02 11:07:59.043464 | TASK [List containers] 2026-06-02 11:07:59.601828 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 11:07:59.602496 | debian-bookworm | { 2026-06-02 11:07:59.602605 | debian-bookworm | "failed_when_result": false, 2026-06-02 11:07:59.602674 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 11:07:59.602772 | debian-bookworm | "rc": 2 2026-06-02 11:07:59.602832 | debian-bookworm | } 2026-06-02 11:07:59.614967 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 11:07:59.615171 | ubuntu-noble | { 2026-06-02 11:07:59.615231 | ubuntu-noble | "failed_when_result": false, 2026-06-02 11:07:59.615273 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 11:07:59.615311 | ubuntu-noble | "rc": 2 2026-06-02 11:07:59.615345 | ubuntu-noble | } 2026-06-02 11:07:59.623211 | 2026-06-02 11:07:59.623347 | LOOP [Save per-container logs] 2026-06-02 11:07:59.688632 | 2026-06-02 11:07:59.688873 | LOOP [Save per-container inspect (state and health)] 2026-06-02 11:07:59.759318 | 2026-06-02 11:07:59.759901 | TASK [Capture netbox systemd unit journal] 2026-06-02 11:08:00.334614 | debian-bookworm | ok: Runtime: 0:00:00.027337 2026-06-02 11:08:00.340155 | ubuntu-noble | ok: Runtime: 0:00:00.024878 2026-06-02 11:08:00.345968 | 2026-06-02 11:08:00.346091 | TASK [Capture netbox service state] 2026-06-02 11:08:00.931309 | debian-bookworm | ok: Runtime: 0:00:00.045226 2026-06-02 11:08:00.942957 | ubuntu-noble | ok: Runtime: 0:00:00.040567 2026-06-02 11:08:00.951566 | 2026-06-02 11:08:00.951738 | TASK [Capture docker compose version] 2026-06-02 11:08:01.527577 | debian-bookworm | ok: Runtime: 0:00:00.010782 2026-06-02 11:08:01.537115 | ubuntu-noble | ok: Runtime: 0:00:00.007220 2026-06-02 11:08:01.547106 | 2026-06-02 11:08:01.547243 | TASK [Open container log permissions] 2026-06-02 11:08:01.870316 | debian-bookworm | changed 2026-06-02 11:08:01.919848 | ubuntu-noble | changed 2026-06-02 11:08:01.922461 | 2026-06-02 11:08:01.922592 | PLAY RECAP 2026-06-02 11:08:01.922712 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 11:08:01.922771 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 11:08:01.922809 | 2026-06-02 11:08:02.085346 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 11:08:02.086757 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 11:08:02.833004 | 2026-06-02 11:08:02.833176 | PLAY [Base post-fetch] 2026-06-02 11:08:02.847613 | 2026-06-02 11:08:02.847777 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 11:08:02.925868 | debian-bookworm | ok 2026-06-02 11:08:02.932664 | ubuntu-noble | ok 2026-06-02 11:08:02.945028 | 2026-06-02 11:08:02.945272 | TASK [fetch-output : Set log path for single node] 2026-06-02 11:08:02.974093 | debian-bookworm | skipping: Conditional result was False 2026-06-02 11:08:02.985096 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 11:08:02.992944 | 2026-06-02 11:08:02.993090 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 11:08:03.498556 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/logs/ubuntu-noble" 2026-06-02 11:08:03.506934 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/logs/debian-bookworm" 2026-06-02 11:08:03.785640 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/artifacts" 2026-06-02 11:08:03.795834 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/artifacts" 2026-06-02 11:08:04.055192 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/docs" 2026-06-02 11:08:04.060349 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/9118ca56e0b54635bb1153212337eb5c/work/docs" 2026-06-02 11:08:04.072759 | 2026-06-02 11:08:04.072871 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 11:08:04.901238 | ubuntu-noble | changed: 2026-06-02 11:08:04.901583 | ubuntu-noble | .d..t...... ./ 2026-06-02 11:08:04.901644 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 11:08:04.901696 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 11:08:04.901733 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 11:08:04.901768 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 11:08:04.901801 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 11:08:04.901835 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 11:08:04.901868 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 11:08:04.901900 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 11:08:04.901977 | ubuntu-noble | changed: All items complete 2026-06-02 11:08:04.902014 | 2026-06-02 11:08:04.908724 | debian-bookworm | changed: 2026-06-02 11:08:04.908818 | debian-bookworm | .d..t...... ./ 2026-06-02 11:08:04.908851 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 11:08:04.908876 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 11:08:04.908898 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 11:08:04.908919 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 11:08:04.908941 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 11:08:04.908961 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 11:08:04.908981 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 11:08:04.909000 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 11:08:05.435347 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 11:08:05.472148 | debian-bookworm | ok 2026-06-02 11:08:06.000578 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 11:08:06.082752 | debian-bookworm | ok 2026-06-02 11:08:06.118176 | 2026-06-02 11:08:06.118376 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 11:08:06.670120 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.011126 2026-06-02 11:08:06.670789 | debian-bookworm -> localhost | changed: All items complete 2026-06-02 11:08:06.670956 | 2026-06-02 11:08:06.960076 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.011979 2026-06-02 11:08:06.979940 | 2026-06-02 11:08:06.980043 | PLAY RECAP 2026-06-02 11:08:06.980100 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 11:08:06.980136 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 11:08:06.980159 | 2026-06-02 11:08:07.124843 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 11:08:07.128191 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 11:08:07.901885 | 2026-06-02 11:08:07.902057 | PLAY [Base post] 2026-06-02 11:08:07.915737 | 2026-06-02 11:08:07.915895 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 11:08:08.767559 | debian-bookworm | changed 2026-06-02 11:08:08.824370 | ubuntu-noble | changed 2026-06-02 11:08:08.841029 | 2026-06-02 11:08:08.841180 | PLAY RECAP 2026-06-02 11:08:08.841290 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 11:08:08.841341 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 11:08:08.841374 | 2026-06-02 11:08:08.978757 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 11:08:08.982378 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 11:08:09.926187 | 2026-06-02 11:08:09.926376 | PLAY [Base post-logs] 2026-06-02 11:08:09.937728 | 2026-06-02 11:08:09.937865 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 11:08:10.451802 | localhost | changed 2026-06-02 11:08:10.468997 | 2026-06-02 11:08:10.469180 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 11:08:10.500423 | localhost | ok 2026-06-02 11:08:10.508013 | 2026-06-02 11:08:10.508183 | TASK [Set zuul-log-path fact] 2026-06-02 11:08:10.539105 | localhost | ok 2026-06-02 11:08:10.552277 | 2026-06-02 11:08:10.552436 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 11:08:10.581185 | localhost | ok 2026-06-02 11:08:10.587337 | 2026-06-02 11:08:10.587564 | TASK [upload-logs : Create log directories] 2026-06-02 11:08:11.095068 | localhost | changed 2026-06-02 11:08:11.100957 | 2026-06-02 11:08:11.101121 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 11:08:11.635900 | localhost -> localhost | ok: Runtime: 0:00:00.007275 2026-06-02 11:08:11.647332 | 2026-06-02 11:08:11.647582 | TASK [upload-logs : Upload logs to log server] 2026-06-02 11:08:12.242612 | localhost | Output suppressed because no_log was given 2026-06-02 11:08:12.245755 | 2026-06-02 11:08:12.246334 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 11:08:12.328995 | localhost | skipping: Conditional result was False 2026-06-02 11:08:12.341428 | localhost | skipping: Conditional result was False 2026-06-02 11:08:12.352439 | 2026-06-02 11:08:12.352799 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 11:08:12.414394 | localhost | skipping: Conditional result was False 2026-06-02 11:08:12.414726 | 2026-06-02 11:08:12.419537 | localhost | skipping: Conditional result was False 2026-06-02 11:08:12.426785 | 2026-06-02 11:08:12.427093 | LOOP [upload-logs : Upload console log and json output]