2026-06-22 11:43:42.075645 | Job console starting 2026-06-22 11:43:42.099736 | Updating git repos 2026-06-22 11:43:42.168957 | Cloning repos into workspace 2026-06-22 11:43:42.297468 | Restoring repo states 2026-06-22 11:43:42.348352 | Merging changes 2026-06-22 11:43:43.100491 | Checking out repos 2026-06-22 11:43:43.143412 | Preparing playbooks 2026-06-22 11:43:43.994898 | Running Ansible setup 2026-06-22 11:43:50.076262 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-22 11:43:50.912801 | 2026-06-22 11:43:50.912996 | PLAY [Base pre] 2026-06-22 11:43:50.932224 | 2026-06-22 11:43:50.932395 | TASK [Setup log path fact] 2026-06-22 11:43:50.971734 | debian-bookworm | ok 2026-06-22 11:43:50.992084 | 2026-06-22 11:43:50.992283 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-22 11:43:51.037455 | debian-bookworm | ok 2026-06-22 11:43:51.048049 | 2026-06-22 11:43:51.048210 | TASK [emit-job-header : Print job information] 2026-06-22 11:43:51.130568 | # Job Information 2026-06-22 11:43:51.130877 | Ansible Version: 2.16.14 2026-06-22 11:43:51.130926 | Job: ansible-collection-services-molecule-auditd 2026-06-22 11:43:51.130968 | Pipeline: check 2026-06-22 11:43:51.130997 | Executor: 521e9411259a 2026-06-22 11:43:51.131022 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-22 11:43:51.131049 | Event ID: f7e78e40-6e2c-11f1-8189-c2b45c3677a3 2026-06-22 11:43:51.138980 | 2026-06-22 11:43:51.139160 | LOOP [emit-job-header : Print node information] 2026-06-22 11:43:51.272185 | debian-bookworm | ok: 2026-06-22 11:43:51.272634 | debian-bookworm | # Node Information 2026-06-22 11:43:51.272704 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-22 11:43:51.272748 | debian-bookworm | Hostname: debian 2026-06-22 11:43:51.272788 | debian-bookworm | Username: zuul 2026-06-22 11:43:51.272827 | debian-bookworm | Distro: Debian 12.14 2026-06-22 11:43:51.272869 | debian-bookworm | Provider: regiocloud-a 2026-06-22 11:43:51.272907 | debian-bookworm | Region: 2026-06-22 11:43:51.272944 | debian-bookworm | Label: debian-bookworm 2026-06-22 11:43:51.272979 | debian-bookworm | Product Name: OpenStack Nova 2026-06-22 11:43:51.273014 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fed5:ad02 2026-06-22 11:43:51.320385 | debian-bookworm | ok: 2026-06-22 11:43:51.320659 | debian-bookworm | # Node Information 2026-06-22 11:43:51.320787 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-22 11:43:51.320846 | debian-bookworm | Hostname: ubuntu 2026-06-22 11:43:51.320898 | debian-bookworm | Username: zuul 2026-06-22 11:43:51.320937 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-22 11:43:51.320973 | debian-bookworm | Provider: regiocloud-a 2026-06-22 11:43:51.321009 | debian-bookworm | Region: 2026-06-22 11:43:51.321045 | debian-bookworm | Label: ubuntu-noble 2026-06-22 11:43:51.321079 | debian-bookworm | Product Name: OpenStack Nova 2026-06-22 11:43:51.321112 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fea9:6fbf 2026-06-22 11:43:51.345908 | 2026-06-22 11:43:51.346087 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-22 11:43:51.848532 | debian-bookworm -> localhost | changed 2026-06-22 11:43:51.862423 | 2026-06-22 11:43:51.862597 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-22 11:43:53.013499 | debian-bookworm -> localhost | changed 2026-06-22 11:43:53.036604 | ubuntu-noble -> localhost | ok 2026-06-22 11:43:53.052232 | 2026-06-22 11:43:53.052383 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-22 11:43:53.381120 | debian-bookworm -> localhost | ok 2026-06-22 11:43:53.396225 | 2026-06-22 11:43:53.396422 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-22 11:43:53.424915 | debian-bookworm | ok 2026-06-22 11:43:53.439594 | ubuntu-noble | ok 2026-06-22 11:43:53.459212 | debian-bookworm | included: /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-22 11:43:53.459326 | ubuntu-noble | included: /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-22 11:43:53.466095 | 2026-06-22 11:43:53.466201 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-22 11:43:55.960381 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-22 11:43:55.960696 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/abb28b886f6141799f8730a9a5963d3b_id_rsa 2026-06-22 11:43:55.960741 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/abb28b886f6141799f8730a9a5963d3b_id_rsa.pub 2026-06-22 11:43:55.960769 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-22 11:43:55.960798 | debian-bookworm -> localhost | SHA256:FTbFz3TgwJgOz1msT6LAIQub2fJIc/HZD6/CMwJonSk zuul-build-sshkey 2026-06-22 11:43:55.960822 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-22 11:43:55.960848 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-22 11:43:55.960870 | debian-bookworm -> localhost | | +Bo .. | 2026-06-22 11:43:55.960892 | debian-bookworm -> localhost | | . o . ..oo=o. .| 2026-06-22 11:43:55.960912 | debian-bookworm -> localhost | | * * + =.+ +.. | 2026-06-22 11:43:55.960932 | debian-bookworm -> localhost | | B + = o.B . o | 2026-06-22 11:43:55.960951 | debian-bookworm -> localhost | | o.*o .S= + | 2026-06-22 11:43:55.960971 | debian-bookworm -> localhost | |.Eo+. . o . | 2026-06-22 11:43:55.960990 | debian-bookworm -> localhost | |. .. . . | 2026-06-22 11:43:55.961010 | debian-bookworm -> localhost | | . = . | 2026-06-22 11:43:55.961029 | debian-bookworm -> localhost | | . + | 2026-06-22 11:43:55.961048 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-22 11:43:55.961154 | debian-bookworm -> localhost | ok: Runtime: 0:00:01.896964 2026-06-22 11:43:55.968808 | 2026-06-22 11:43:55.969064 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-22 11:43:56.013929 | debian-bookworm | ok 2026-06-22 11:43:56.018488 | ubuntu-noble | ok 2026-06-22 11:43:56.038185 | debian-bookworm | included: /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-22 11:43:56.038291 | ubuntu-noble | included: /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-22 11:43:56.049888 | 2026-06-22 11:43:56.050021 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-22 11:43:56.088753 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:43:56.100170 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:43:56.115690 | 2026-06-22 11:43:56.115851 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-22 11:43:56.803763 | debian-bookworm | changed 2026-06-22 11:43:56.915398 | ubuntu-noble | changed 2026-06-22 11:43:56.925351 | 2026-06-22 11:43:56.925492 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-22 11:43:57.186433 | debian-bookworm | ok 2026-06-22 11:43:57.236966 | ubuntu-noble | ok 2026-06-22 11:43:57.244414 | 2026-06-22 11:43:57.244583 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-22 11:43:57.951996 | debian-bookworm | changed 2026-06-22 11:43:58.107703 | ubuntu-noble | changed 2026-06-22 11:43:58.117249 | 2026-06-22 11:43:58.117404 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-22 11:43:58.952926 | debian-bookworm | changed 2026-06-22 11:43:58.957987 | ubuntu-noble | changed 2026-06-22 11:43:58.963567 | 2026-06-22 11:43:58.963678 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-22 11:43:59.001065 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:43:59.001642 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:43:59.008077 | 2026-06-22 11:43:59.008214 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-22 11:43:59.479816 | debian-bookworm -> localhost | changed 2026-06-22 11:43:59.499306 | 2026-06-22 11:43:59.499465 | TASK [add-build-sshkey : Add back temp key] 2026-06-22 11:43:59.871071 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/abb28b886f6141799f8730a9a5963d3b_id_rsa (zuul-build-sshkey) 2026-06-22 11:43:59.871657 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.023531 2026-06-22 11:43:59.885997 | 2026-06-22 11:43:59.886206 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-22 11:44:00.278069 | debian-bookworm | ok 2026-06-22 11:44:00.316303 | ubuntu-noble | ok 2026-06-22 11:44:00.321799 | 2026-06-22 11:44:00.321913 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-22 11:44:00.353086 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:44:00.374449 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:44:00.397778 | 2026-06-22 11:44:00.397930 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-22 11:44:00.788133 | debian-bookworm | ok 2026-06-22 11:44:00.834151 | ubuntu-noble | ok 2026-06-22 11:44:00.849920 | 2026-06-22 11:44:00.850070 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-22 11:44:00.901539 | debian-bookworm | ok 2026-06-22 11:44:00.917189 | ubuntu-noble | ok 2026-06-22 11:44:00.922421 | 2026-06-22 11:44:00.922555 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-22 11:44:01.234103 | debian-bookworm -> localhost | ok 2026-06-22 11:44:01.255784 | 2026-06-22 11:44:01.255961 | TASK [validate-host : Collect information about the host] 2026-06-22 11:44:02.386418 | debian-bookworm | ok 2026-06-22 11:44:02.453267 | ubuntu-noble | ok 2026-06-22 11:44:02.464613 | 2026-06-22 11:44:02.464762 | TASK [validate-host : Sanitize hostname] 2026-06-22 11:44:02.522667 | debian-bookworm | ok 2026-06-22 11:44:02.566161 | ubuntu-noble | ok 2026-06-22 11:44:02.574083 | 2026-06-22 11:44:02.574251 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-22 11:44:03.174944 | debian-bookworm -> localhost | changed 2026-06-22 11:44:03.196755 | ubuntu-noble -> localhost | changed 2026-06-22 11:44:03.203804 | 2026-06-22 11:44:03.203934 | TASK [validate-host : Collect information about zuul worker] 2026-06-22 11:44:03.722172 | debian-bookworm | ok 2026-06-22 11:44:03.762293 | ubuntu-noble | ok 2026-06-22 11:44:03.771107 | 2026-06-22 11:44:03.771294 | TASK [validate-host : Write out all zuul information for each host] 2026-06-22 11:44:04.413940 | ubuntu-noble -> localhost | changed 2026-06-22 11:44:04.519475 | debian-bookworm -> localhost | changed 2026-06-22 11:44:04.544156 | 2026-06-22 11:44:04.544311 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-22 11:44:04.843339 | debian-bookworm | ok 2026-06-22 11:44:04.850255 | ubuntu-noble | ok 2026-06-22 11:44:04.857633 | 2026-06-22 11:44:04.857757 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-22 11:44:06.207842 | ubuntu-noble | changed: 2026-06-22 11:44:06.208181 | ubuntu-noble | cd+++++++++ src/ 2026-06-22 11:44:06.208226 | ubuntu-noble | cd+++++++++ src/github.com/ 2026-06-22 11:44:06.208256 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2026-06-22 11:44:06.208282 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-22 11:44:06.208306 | ubuntu-noble | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:03.845773 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:46:03.877606 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:04.521512 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:04.522158 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:04.544962 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:04.550618 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-22 11:46:04.550848 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:04.492115 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:04.492727 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:04.512819 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:04.518526 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-22 11:46:04.518613 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:05.706657 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-22 11:46:05.707116 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-22 11:46:05.889617 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-22 11:46:05.890154 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-22 11:46:06.066404 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-06-22 11:46:06.066939 | debian-bookworm | config file = None 2026-06-22 11:46:06.067341 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-22 11:46:06.067833 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-22 11:46:06.068236 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-22 11:46:06.068576 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-22 11:46:06.068952 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-22 11:46:06.069295 | debian-bookworm | jinja version = 3.1.6 2026-06-22 11:46:06.069596 | debian-bookworm | libyaml = True 2026-06-22 11:46:06.069845 | debian-bookworm | No config file found; using defaults 2026-06-22 11:46:06.070286 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-22 11:46:06.071684 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-22 11:46:06.072103 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-22 11:46:06.076499 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-22 11:46:06.076877 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-22 11:46:06.077251 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-22 11:46:06.077618 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-22 11:46:06.077957 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-22 11:46:06.078355 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-22 11:46:06.078846 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-22 11:46:06.079120 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-22 11:46:06.079684 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-22 11:46:06.079927 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-22 11:46:06.080381 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-22 11:46:06.080715 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-22 11:46:06.081145 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-22 11:46:06.081493 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-22 11:46:06.081929 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-22 11:46:06.082211 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-22 11:46:06.082529 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-22 11:46:06.082860 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-22 11:46:06.083174 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-22 11:46:06.083471 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-22 11:46:06.084629 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-22 11:46:06.084941 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-22 11:46:06.085291 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-22 11:46:06.085610 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-22 11:46:06.086110 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-22 11:46:06.086425 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-22 11:46:06.086781 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-22 11:46:06.087045 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-22 11:46:06.088171 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-22 11:46:06.088476 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-22 11:46:06.089118 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-22 11:46:06.089374 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-22 11:46:06.089533 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-22 11:46:06.089758 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-22 11:46:06.089952 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-22 11:46:06.090239 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-22 11:46:06.090481 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-22 11:46:06.090762 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-22 11:46:06.091176 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-22 11:46:06.091454 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-22 11:46:06.091753 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-22 11:46:06.092024 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-22 11:46:06.093121 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-22 11:46:06.093432 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-22 11:46:06.094090 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-22 11:46:06.094434 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-22 11:46:06.094750 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-22 11:46:06.095045 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-22 11:46:06.095256 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-22 11:46:06.095535 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-22 11:46:06.095870 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-22 11:46:06.096122 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-22 11:46:06.096394 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-22 11:46:06.096680 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-22 11:46:06.096944 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-22 11:46:06.097200 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-22 11:46:06.098699 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-22 11:46:06.099020 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-22 11:46:06.100871 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-22 11:46:06.101188 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-22 11:46:06.103241 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-22 11:46:06.103561 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-22 11:46:06.103851 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-22 11:46:06.104135 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-22 11:46:06.104423 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-22 11:46:06.104693 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-22 11:46:06.105713 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-22 11:46:06.106008 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-22 11:46:06.108318 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-22 11:46:06.108666 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-22 11:46:06.109490 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-22 11:46:06.109805 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-22 11:46:06.110042 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-22 11:46:06.110332 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-22 11:46:06.110673 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-22 11:46:06.110976 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-22 11:46:06.111609 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-22 11:46:06.111915 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-22 11:46:06.112610 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-22 11:46:06.112917 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-22 11:46:06.113313 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-22 11:46:06.113605 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-22 11:46:06.113954 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-22 11:46:06.114234 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-22 11:46:06.117842 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-22 11:46:06.118160 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-22 11:46:06.120540 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-22 11:46:06.120883 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-22 11:46:06.121122 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-22 11:46:06.121392 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-22 11:46:06.121824 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-22 11:46:06.122104 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-22 11:46:06.122730 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-22 11:46:06.123022 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-22 11:46:06.123376 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-22 11:46:06.123684 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-22 11:46:06.124469 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-22 11:46:06.124790 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-22 11:46:06.125124 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-22 11:46:06.125402 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-22 11:46:06.125699 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-22 11:46:06.126021 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-22 11:46:06.126824 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-22 11:46:06.127112 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-22 11:46:06.127677 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-22 11:46:06.127966 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-22 11:46:06.128595 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-22 11:46:06.128899 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-22 11:46:06.130052 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-22 11:46:06.130364 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-22 11:46:06.130658 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-22 11:46:06.130943 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-22 11:46:06.131998 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-22 11:46:06.132300 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-22 11:46:06.132537 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-22 11:46:06.132848 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-22 11:46:06.133024 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-22 11:46:06.133323 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-22 11:46:06.133598 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-22 11:46:06.133899 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-22 11:46:06.134613 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-22 11:46:06.134924 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-22 11:46:06.135206 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-22 11:46:06.135483 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-22 11:46:06.135981 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-22 11:46:06.136278 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-22 11:46:06.142226 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-22 11:46:06.142602 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-22 11:46:06.143098 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-22 11:46:06.143401 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-22 11:46:06.144065 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-22 11:46:06.144370 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-22 11:46:06.147614 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-22 11:46:06.147966 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-22 11:46:06.149478 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-22 11:46:06.149869 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-22 11:46:06.150613 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-22 11:46:06.150933 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-22 11:46:06.151714 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-22 11:46:06.152055 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-22 11:46:06.152518 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-22 11:46:06.152828 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-22 11:46:06.153130 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-22 11:46:06.153406 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-22 11:46:06.154077 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-22 11:46:06.154361 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-22 11:46:06.163463 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-22 11:46:06.163837 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-22 11:46:06.164052 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-22 11:46:06.164384 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-22 11:46:06.166861 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-22 11:46:06.167225 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-22 11:46:06.167729 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-22 11:46:06.168062 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-22 11:46:06.168492 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-22 11:46:06.168805 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-22 11:46:06.170038 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-22 11:46:06.170355 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-22 11:46:06.170712 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-22 11:46:06.171039 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-22 11:46:06.171408 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-22 11:46:06.171688 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-22 11:46:06.172548 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-22 11:46:06.172857 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-22 11:46:06.173217 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-22 11:46:06.173492 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-22 11:46:06.173847 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-22 11:46:06.174129 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-22 11:46:06.209829 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-22 11:46:06.210091 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-22 11:46:06.210677 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-22 11:46:06.210924 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-22 11:46:06.211171 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-22 11:46:06.211492 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-22 11:46:06.213424 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-22 11:46:06.213771 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-22 11:46:06.214018 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-22 11:46:06.214266 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-22 11:46:06.214537 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-22 11:46:06.214831 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-22 11:46:06.215165 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-22 11:46:06.215410 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-22 11:46:06.216213 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-22 11:46:06.216500 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-22 11:46:06.216747 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-22 11:46:06.216971 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-22 11:46:06.218762 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-22 11:46:06.219077 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-22 11:46:06.219599 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-22 11:46:06.219920 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-22 11:46:06.220199 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-22 11:46:06.220481 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-22 11:46:06.220768 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-22 11:46:06.221075 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-22 11:46:06.221401 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-22 11:46:06.221677 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-22 11:46:06.225856 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-22 11:46:06.226287 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-22 11:46:06.226476 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-22 11:46:06.286855 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-06-22 11:46:06.286904 | ubuntu-noble | config file = None 2026-06-22 11:46:06.287324 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-22 11:46:06.287914 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-22 11:46:06.288608 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-22 11:46:06.289190 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-22 11:46:06.289701 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-22 11:46:06.290447 | ubuntu-noble | jinja version = 3.1.6 2026-06-22 11:46:06.290812 | ubuntu-noble | libyaml = True 2026-06-22 11:46:06.291248 | ubuntu-noble | No config file found; using defaults 2026-06-22 11:46:06.291921 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-22 11:46:06.300245 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-22 11:46:06.300603 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-22 11:46:06.312947 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-22 11:46:06.313360 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-22 11:46:06.314174 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-22 11:46:06.314642 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-22 11:46:06.315157 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-22 11:46:06.315699 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-22 11:46:06.316250 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-22 11:46:06.316637 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-22 11:46:06.319009 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-22 11:46:06.320848 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-22 11:46:06.320875 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-22 11:46:06.320881 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-22 11:46:06.321104 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-22 11:46:06.321984 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-22 11:46:06.322673 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-22 11:46:06.323309 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-22 11:46:06.324014 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-22 11:46:06.324446 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-22 11:46:06.325209 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-22 11:46:06.325565 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-22 11:46:06.326223 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-22 11:46:06.326744 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-22 11:46:06.327431 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-22 11:46:06.327727 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-22 11:46:06.327999 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-22 11:46:06.328454 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-22 11:46:06.328694 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-22 11:46:06.329217 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-22 11:46:06.329461 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-22 11:46:06.329906 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-22 11:46:06.332100 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-22 11:46:06.332577 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-22 11:46:06.333853 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-22 11:46:06.334541 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-22 11:46:06.336129 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-22 11:46:06.336511 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-22 11:46:06.336854 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-22 11:46:06.337838 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-22 11:46:06.338862 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-22 11:46:06.339227 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-22 11:46:06.340018 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-22 11:46:06.340397 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-22 11:46:06.340745 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-22 11:46:06.341163 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-22 11:46:06.341773 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-22 11:46:06.342117 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-22 11:46:06.342418 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-22 11:46:06.342690 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-22 11:46:06.370767 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-22 11:46:06.371133 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-22 11:46:06.372024 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-22 11:46:06.372934 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-22 11:46:06.375839 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-22 11:46:06.375864 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-22 11:46:06.375870 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-22 11:46:06.375874 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-22 11:46:06.375877 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-22 11:46:06.375882 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-22 11:46:06.375971 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-22 11:46:06.376372 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-22 11:46:06.376723 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-22 11:46:06.377085 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-22 11:46:06.377463 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-22 11:46:06.377824 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-22 11:46:06.379284 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-22 11:46:06.379570 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-22 11:46:06.379886 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-22 11:46:06.380230 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-22 11:46:06.380530 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-22 11:46:06.380843 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-22 11:46:06.383756 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-22 11:46:06.384124 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-22 11:46:06.387152 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-22 11:46:06.387492 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-22 11:46:06.387823 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-22 11:46:06.388183 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-22 11:46:06.388500 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-22 11:46:06.388831 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-22 11:46:06.389181 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-22 11:46:06.389486 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-22 11:46:06.390291 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-22 11:46:06.390572 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-22 11:46:06.392307 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-22 11:46:06.392707 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-22 11:46:06.393463 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-22 11:46:06.393743 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-22 11:46:06.394237 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-22 11:46:06.394521 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-22 11:46:06.396296 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-22 11:46:06.396540 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-22 11:46:06.397750 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-22 11:46:06.398130 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-22 11:46:06.398648 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-22 11:46:06.398936 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-22 11:46:06.399442 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-22 11:46:06.399706 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-22 11:46:06.400184 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-22 11:46:06.400517 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-22 11:46:06.401416 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-22 11:46:06.401673 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-22 11:46:06.404453 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-22 11:46:06.404906 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-22 11:46:06.405221 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-22 11:46:06.405498 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-22 11:46:06.405885 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-22 11:46:06.406183 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-22 11:46:06.406437 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-22 11:46:06.406837 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-22 11:46:06.407247 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-22 11:46:06.407593 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-22 11:46:06.407970 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-22 11:46:06.408390 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-22 11:46:06.410260 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-22 11:46:06.410543 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-22 11:46:06.417098 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-22 11:46:06.417391 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-22 11:46:06.417584 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-22 11:46:06.417859 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-22 11:46:06.418097 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-22 11:46:06.418344 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-22 11:46:06.418827 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-22 11:46:06.419077 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-22 11:46:06.419510 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-22 11:46:06.419867 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-22 11:46:06.420379 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-22 11:46:06.420603 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-22 11:46:06.421500 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-22 11:46:06.421782 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-22 11:46:06.422001 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-22 11:46:06.422376 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-22 11:46:06.424663 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-22 11:46:06.425061 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-22 11:46:06.425436 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-22 11:46:06.425744 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-22 11:46:06.426880 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-22 11:46:06.426919 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-22 11:46:06.427488 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-22 11:46:06.427521 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-22 11:46:06.427815 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-22 11:46:06.428086 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-22 11:46:06.428683 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-22 11:46:06.428696 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-22 11:46:06.429464 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-22 11:46:06.429693 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-22 11:46:06.430851 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-22 11:46:06.431184 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-22 11:46:06.431434 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-22 11:46:06.431920 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-22 11:46:06.431943 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-22 11:46:06.432146 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-22 11:46:06.435828 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-22 11:46:06.436132 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-22 11:46:06.436353 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-22 11:46:06.436642 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-22 11:46:06.437476 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-22 11:46:06.437497 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-22 11:46:06.437503 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-22 11:46:06.437508 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-22 11:46:06.438310 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-22 11:46:06.438516 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-22 11:46:06.438999 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-22 11:46:06.439242 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-22 11:46:06.439606 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-22 11:46:06.439855 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-22 11:46:06.440561 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-22 11:46:06.440576 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-22 11:46:06.481364 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-22 11:46:06.481420 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-22 11:46:06.481430 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-22 11:46:06.481438 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-22 11:46:06.482614 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-22 11:46:06.482647 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-22 11:46:06.483542 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-22 11:46:06.483570 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-22 11:46:06.483884 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-22 11:46:06.484222 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-22 11:46:06.484503 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-22 11:46:06.484693 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-22 11:46:06.484879 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-22 11:46:06.485070 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-22 11:46:06.485264 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-22 11:46:06.485512 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-22 11:46:06.486146 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-22 11:46:06.486442 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-22 11:46:06.486865 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-22 11:46:06.487146 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-22 11:46:06.487445 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-22 11:46:06.487675 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-22 11:46:06.487941 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-22 11:46:06.488200 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-22 11:46:06.492200 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-22 11:46:06.492583 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-22 11:46:06.492594 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-22 11:46:06.492906 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-22 11:46:06.493569 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-22 11:46:06.493585 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-22 11:46:06.497858 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-22 11:46:06.498443 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-22 11:46:06.498460 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-22 11:46:10.155697 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-22 11:46:10.159461 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-22 11:46:10.703120 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-22 11:46:10.703197 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-22 11:46:13.957089 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-22 11:46:15.586864 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-22 11:46:17.144211 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-22 11:46:17.144269 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-22 11:46:17.052003 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-22 11:46:18.400918 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-22 11:46:18.400982 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-22 11:46:18.564891 | ubuntu-noble | Starting galaxy collection install process 2026-06-22 11:46:18.564957 | ubuntu-noble | Process install dependency map 2026-06-22 11:46:18.564973 | ubuntu-noble | Starting collection install process 2026-06-22 11:46:18.564984 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-22 11:46:18.565219 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-22 11:46:18.565704 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-22 11:46:18.566257 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-22 11:46:18.566871 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1788j3hp8z7l/tmp_h30i99n/osism-commons-0.20260601.0-8xt_f33z 2026-06-22 11:46:18.567454 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-22 11:46:18.567923 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-22 11:46:18.623098 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-22 11:46:18.623563 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-22 11:46:18.624402 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-22 11:46:19.485875 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-22 11:46:22.035420 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-22 11:46:22.036186 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-22 11:46:30.199508 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-22 11:46:30.200071 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-22 11:46:30.371064 | debian-bookworm | Starting galaxy collection install process 2026-06-22 11:46:30.371180 | debian-bookworm | Process install dependency map 2026-06-22 11:46:30.371198 | debian-bookworm | Starting collection install process 2026-06-22 11:46:30.371298 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-22 11:46:30.371395 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-22 11:46:30.371493 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-22 11:46:30.371655 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-22 11:46:30.371738 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-19342ker05ma/tmpk8ivrzd9/osism-commons-0.20260601.0-_pll062e 2026-06-22 11:46:30.371835 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-22 11:46:30.371935 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-22 11:46:30.462491 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-22 11:46:30.463175 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-22 11:46:30.464239 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-22 11:46:30.786196 | ubuntu-noble | ok: Runtime: 0:00:15.115691 2026-06-22 11:46:30.798791 | debian-bookworm | ok: Runtime: 0:00:27.030381 2026-06-22 11:46:30.812389 | 2026-06-22 11:46:30.812748 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-22 11:46:31.386691 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:46:31.388297 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:46:31.401100 | 2026-06-22 11:46:31.401288 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-22 11:46:32.107302 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:46:32.118785 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:32.058282 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:46:32.067847 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:32.574754 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:32.575469 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:32.596277 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:32.601908 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-22 11:46:32.602073 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:32.559266 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:32.560098 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:32.580466 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:32.586136 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-22 11:46:32.586300 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:33.792667 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-22 11:46:33.773454 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-22 11:46:34.100692 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-22 11:46:34.100758 | ubuntu-noble | config file = None 2026-06-22 11:46:34.100791 | ubuntu-noble | configured module search path = 2026-06-22 11:46:34.100839 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-22 11:46:34.100858 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-22 11:46:34.100868 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-22 11:46:34.100878 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-22 11:46:34.100889 | ubuntu-noble | jinja version = 3.1.6 2026-06-22 11:46:34.100899 | ubuntu-noble | libyaml = True 2026-06-22 11:46:34.101384 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:46:34.101449 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:46:34.101461 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:46:34.101471 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:46:34.101482 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:46:34.101492 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-22 11:46:34.101502 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:46:34.101512 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-22 11:46:34.101523 | ubuntu-noble | 2026-06-22 11:46:34.101852 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:46:34.101880 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-22 11:46:34.101891 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:46:34.101901 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-22 11:46:34.101910 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:46:34.101920 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:46:34.101931 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:46:34.101941 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:46:34.101950 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:46:34.101961 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:46:34.101971 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:46:34.101980 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:46:34.101990 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:46:34.102000 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:46:34.102010 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:46:34.102020 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:34.102031 | ubuntu-noble | 2026-06-22 11:46:34.102431 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:34.393312 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-22 11:46:34.120807 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-22 11:46:34.120895 | debian-bookworm | config file = None 2026-06-22 11:46:34.120923 | debian-bookworm | configured module search path = 2026-06-22 11:46:34.120938 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-22 11:46:34.120956 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-22 11:46:34.120968 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-22 11:46:34.120979 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-22 11:46:34.120991 | debian-bookworm | jinja version = 3.1.6 2026-06-22 11:46:34.121002 | debian-bookworm | libyaml = True 2026-06-22 11:46:34.121014 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:46:34.121026 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:46:34.121037 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:46:34.121048 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:46:34.121059 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:46:34.121070 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-22 11:46:34.121081 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:46:34.121092 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-22 11:46:34.121103 | debian-bookworm | 2026-06-22 11:46:34.121115 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:46:34.121126 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-22 11:46:34.121137 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:46:34.121148 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-22 11:46:34.121159 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:46:34.121182 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:46:34.121193 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:46:34.121205 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:46:34.121216 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:46:34.121228 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:46:34.121239 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:46:34.121250 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:46:34.121261 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:46:34.121272 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:46:34.121283 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:46:34.121294 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:34.121306 | debian-bookworm | 2026-06-22 11:46:34.121325 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:34.394481 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-22 11:46:34.635084 | ubuntu-noble | 2026-06-22 11:46:34.635641 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-22 11:46:34.637886 | ubuntu-noble | 2026-06-22 11:46:34.637933 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-22 11:46:34.661107 | debian-bookworm | 2026-06-22 11:46:34.661191 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-22 11:46:34.661206 | debian-bookworm | 2026-06-22 11:46:34.661219 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-22 11:46:35.864337 | ubuntu-noble | ok: [molecule-auditd] 2026-06-22 11:46:35.864394 | ubuntu-noble | 2026-06-22 11:46:35.864401 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-22 11:46:35.763987 | debian-bookworm | ok: [molecule-auditd] 2026-06-22 11:46:35.767370 | debian-bookworm | 2026-06-22 11:46:35.767402 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-22 11:46:40.158444 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.5 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.5 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.158532 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 23.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 23.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.158933 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.158948 | debian-bookworm | 2026-06-22 11:46:40.158954 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-22 11:46:40.181174 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-22 11:46:40.181228 | debian-bookworm | 2026-06-22 11:46:40.181236 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-22 11:46:40.181245 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-22 11:46:40.181251 | debian-bookworm | 2026-06-22 11:46:40.276915 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-22 11:46:40.277779 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-22 11:46:40.495318 | debian-bookworm | ok: Runtime: 0:00:08.617325 2026-06-22 11:46:40.888850 | ubuntu-noble | ok: Runtime: 0:00:09.040649 2026-06-22 11:46:40.900060 | 2026-06-22 11:46:40.900249 | TASK [ansible-molecule : Reset connection] 2026-06-22 11:46:40.954145 | 2026-06-22 11:46:40.954349 | TASK [ansible-molecule : Reset connection] 2026-06-22 11:46:40.653066 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.5 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.5 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.653743 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 24.4 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 24.4 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.653991 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-22 11:46:40.654184 | ubuntu-noble | 2026-06-22 11:46:40.654361 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-22 11:46:40.672161 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-22 11:46:40.672422 | ubuntu-noble | 2026-06-22 11:46:40.672705 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-22 11:46:40.673054 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-22 11:46:40.673349 | ubuntu-noble | 2026-06-22 11:46:40.758351 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-22 11:46:40.759091 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-22 11:46:41.012469 | 2026-06-22 11:46:41.012785 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-22 11:46:41.972847 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:46:41.983787 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:41.897905 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:46:41.908462 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:42.535295 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:42.536434 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:42.391701 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:46:42.392329 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:46:42.412695 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:42.418269 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-22 11:46:42.418474 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:42.573547 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:46:42.580197 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-22 11:46:42.580241 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:46:43.950196 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-22 11:46:43.950668 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-22 11:46:43.651296 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-22 11:46:43.651651 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-22 11:46:44.016143 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-06-22 11:46:44.019420 | debian-bookworm | config file = None 2026-06-22 11:46:44.019510 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-22 11:46:44.019526 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-22 11:46:44.019559 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-22 11:46:44.019586 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-22 11:46:44.019623 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-22 11:46:44.019636 | debian-bookworm | jinja version = 3.1.6 2026-06-22 11:46:44.019648 | debian-bookworm | libyaml = True 2026-06-22 11:46:44.019660 | debian-bookworm | No config file found; using defaults 2026-06-22 11:46:44.020709 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-22 11:46:44.033137 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-22 11:46:44.033861 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-22 11:46:44.035752 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-22 11:46:44.036331 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-22 11:46:44.038215 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-22 11:46:44.038834 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-22 11:46:44.039237 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-22 11:46:44.039657 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-22 11:46:44.040039 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-22 11:46:44.040422 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-22 11:46:44.041910 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-22 11:46:44.042291 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-22 11:46:44.042915 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-22 11:46:44.043300 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-22 11:46:44.043700 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-22 11:46:44.044073 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-22 11:46:44.044453 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-22 11:46:44.044862 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-22 11:46:44.046018 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-22 11:46:44.046356 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-22 11:46:44.046778 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-22 11:46:44.047154 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-22 11:46:44.056992 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-22 11:46:44.057440 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-22 11:46:44.057850 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-22 11:46:44.058126 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-22 11:46:44.058552 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-22 11:46:44.058949 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-22 11:46:44.059315 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-22 11:46:44.059758 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-22 11:46:44.060104 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-22 11:46:44.060487 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-22 11:46:44.061234 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-22 11:46:44.061690 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-22 11:46:44.061993 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-22 11:46:44.062286 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-22 11:46:44.062812 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-22 11:46:44.063101 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-22 11:46:44.063360 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-22 11:46:44.063763 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-22 11:46:44.063979 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-22 11:46:44.064248 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-22 11:46:44.069215 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-22 11:46:44.069518 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-22 11:46:44.069941 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-22 11:46:44.070252 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-22 11:46:44.070636 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-22 11:46:44.070941 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-22 11:46:44.071245 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-22 11:46:44.071559 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-22 11:46:44.071880 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-22 11:46:44.072182 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-22 11:46:44.072416 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-22 11:46:44.072787 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-22 11:46:44.073049 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-22 11:46:44.073255 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-22 11:46:44.073527 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-22 11:46:44.073821 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-22 11:46:44.074279 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-22 11:46:44.074609 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-22 11:46:44.075229 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-22 11:46:44.075542 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-22 11:46:44.076534 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-22 11:46:44.076861 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-22 11:46:44.080042 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-22 11:46:44.080292 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-22 11:46:44.080654 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-22 11:46:44.080978 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-22 11:46:44.082629 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-22 11:46:44.082899 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-22 11:46:44.083154 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-22 11:46:44.083496 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-22 11:46:44.083778 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-22 11:46:44.084022 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-22 11:46:44.084268 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-22 11:46:44.084616 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-22 11:46:44.085494 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-22 11:46:44.085906 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-22 11:46:44.394866 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-06-22 11:46:44.396779 | ubuntu-noble | config file = None 2026-06-22 11:46:44.396833 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-22 11:46:44.396843 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-22 11:46:44.397202 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-22 11:46:44.397471 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-22 11:46:44.397851 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-22 11:46:44.399102 | ubuntu-noble | jinja version = 3.1.6 2026-06-22 11:46:44.400121 | ubuntu-noble | libyaml = True 2026-06-22 11:46:44.400426 | ubuntu-noble | No config file found; using defaults 2026-06-22 11:46:44.400874 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-22 11:46:44.410242 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-22 11:46:44.410698 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-22 11:46:44.411300 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-22 11:46:44.411623 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-22 11:46:44.412117 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-22 11:46:44.412427 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-22 11:46:44.412865 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-22 11:46:44.413189 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-22 11:46:44.413588 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-22 11:46:44.413914 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-22 11:46:44.414345 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-22 11:46:44.414730 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-22 11:46:44.415974 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-22 11:46:44.416509 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-22 11:46:44.416977 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-22 11:46:44.417426 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-22 11:46:44.419136 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-22 11:46:44.419471 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-22 11:46:44.420131 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-22 11:46:44.420480 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-22 11:46:44.420846 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-22 11:46:44.421237 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-22 11:46:44.421597 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-22 11:46:44.421989 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-22 11:46:44.425842 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-22 11:46:44.426504 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-22 11:46:44.427089 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-22 11:46:44.427532 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-22 11:46:44.427935 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-22 11:46:44.428222 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-22 11:46:44.428580 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-22 11:46:44.428850 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-22 11:46:44.429196 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-22 11:46:44.429524 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-22 11:46:44.460671 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-22 11:46:44.461229 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-22 11:46:44.463688 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-22 11:46:44.464622 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-22 11:46:44.465167 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-22 11:46:44.465488 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-22 11:46:44.467839 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-22 11:46:44.467864 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-22 11:46:44.467870 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-22 11:46:44.467874 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-22 11:46:44.467896 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-22 11:46:44.468335 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-22 11:46:44.468766 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-22 11:46:44.469139 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-22 11:46:44.470961 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-22 11:46:44.471372 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-22 11:46:44.471878 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-22 11:46:44.472247 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-22 11:46:44.473353 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-22 11:46:44.473695 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-22 11:46:44.474446 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-22 11:46:44.474781 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-22 11:46:44.475387 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-22 11:46:44.475736 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-22 11:46:44.476227 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-22 11:46:44.476578 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-22 11:46:44.476947 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-22 11:46:44.477318 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-22 11:46:44.477694 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-22 11:46:44.478146 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-22 11:46:44.478372 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-22 11:46:44.478651 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-22 11:46:44.479298 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-22 11:46:44.479591 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-22 11:46:44.479909 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-22 11:46:44.480214 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-22 11:46:44.480507 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-22 11:46:44.480832 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-22 11:46:44.481617 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-22 11:46:44.481878 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-22 11:46:44.482290 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-22 11:46:44.482580 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-22 11:46:44.482990 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-22 11:46:44.483248 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-22 11:46:44.484633 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-22 11:46:44.484896 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-22 11:46:44.491145 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-22 11:46:44.491415 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-22 11:46:44.493167 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-22 11:46:44.493404 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-22 11:46:44.493948 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-22 11:46:44.494286 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-22 11:46:44.494635 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-22 11:46:44.494972 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-22 11:46:44.495554 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-22 11:46:44.495780 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-22 11:46:44.496239 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-22 11:46:44.496571 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-22 11:46:44.496870 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-22 11:46:44.497169 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-22 11:46:44.497399 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-22 11:46:44.497614 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-22 11:46:44.497943 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-22 11:46:44.498336 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-22 11:46:44.498708 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-22 11:46:44.498958 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-22 11:46:44.499174 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-22 11:46:44.499479 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-22 11:46:44.501690 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-22 11:46:44.501877 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-22 11:46:44.502835 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-22 11:46:44.503182 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-22 11:46:44.503865 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-22 11:46:44.504217 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-22 11:46:44.504633 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-22 11:46:44.505002 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-22 11:46:44.509845 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-22 11:46:44.509882 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-22 11:46:44.509905 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-22 11:46:44.510234 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-22 11:46:44.510511 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-22 11:46:44.510684 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-22 11:46:44.512312 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-22 11:46:44.513367 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-22 11:46:44.515754 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-22 11:46:44.516413 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-22 11:46:44.516897 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-22 11:46:44.517540 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-22 11:46:44.517990 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-22 11:46:44.518843 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-22 11:46:44.518874 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-22 11:46:44.519355 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-22 11:46:44.519710 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-22 11:46:44.520145 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-22 11:46:44.520646 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-22 11:46:44.521119 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-22 11:46:44.521563 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-22 11:46:44.521909 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-22 11:46:44.522261 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-22 11:46:44.523845 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-22 11:46:44.523875 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-22 11:46:44.523885 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-22 11:46:44.523895 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-22 11:46:44.523905 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-22 11:46:44.524305 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-22 11:46:44.524613 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-22 11:46:44.524904 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-22 11:46:44.525194 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-22 11:46:44.525574 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-22 11:46:44.525959 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-22 11:46:44.526267 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-22 11:46:44.526536 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-22 11:46:44.527091 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-22 11:46:44.527390 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-22 11:46:44.527707 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-22 11:46:44.528005 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-22 11:46:44.087506 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-22 11:46:44.087786 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-22 11:46:44.088227 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-22 11:46:44.088702 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-22 11:46:44.088952 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-22 11:46:44.089305 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-22 11:46:44.089790 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-22 11:46:44.090110 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-22 11:46:44.091804 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-22 11:46:44.092144 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-22 11:46:44.094582 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-22 11:46:44.094946 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-22 11:46:44.095393 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-22 11:46:44.095794 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-22 11:46:44.096269 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-22 11:46:44.096577 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-22 11:46:44.097534 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-22 11:46:44.098091 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-22 11:46:44.098491 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-22 11:46:44.098934 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-22 11:46:44.099330 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-22 11:46:44.099651 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-22 11:46:44.101227 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-22 11:46:44.101584 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-22 11:46:44.103734 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-22 11:46:44.104080 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-22 11:46:44.106702 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-22 11:46:44.107062 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-22 11:46:44.107409 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-22 11:46:44.107765 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-22 11:46:44.108102 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-22 11:46:44.108429 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-22 11:46:44.111732 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-22 11:46:44.112066 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-22 11:46:44.112404 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-22 11:46:44.112790 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-22 11:46:44.113126 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-22 11:46:44.113387 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-22 11:46:44.113763 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-22 11:46:44.114020 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-22 11:46:44.114515 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-22 11:46:44.114919 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-22 11:46:44.115454 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-22 11:46:44.115747 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-22 11:46:44.116016 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-22 11:46:44.116290 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-22 11:46:44.116672 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-22 11:46:44.116962 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-22 11:46:44.117241 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-22 11:46:44.117510 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-22 11:46:44.117855 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-22 11:46:44.118134 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-22 11:46:44.119038 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-22 11:46:44.119475 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-22 11:46:44.119860 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-22 11:46:44.120207 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-22 11:46:44.120778 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-22 11:46:44.121112 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-22 11:46:44.122400 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-22 11:46:44.122709 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-22 11:46:44.123012 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-22 11:46:44.123317 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-22 11:46:44.124096 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-22 11:46:44.124428 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-22 11:46:44.125033 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-22 11:46:44.125351 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-22 11:46:44.125878 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-22 11:46:44.126227 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-22 11:46:44.126562 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-22 11:46:44.126830 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-22 11:46:44.163008 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-22 11:46:44.163378 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-22 11:46:44.163777 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-22 11:46:44.164146 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-22 11:46:44.164518 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-22 11:46:44.164915 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-22 11:46:44.165688 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-22 11:46:44.166055 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-22 11:46:44.167183 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-22 11:46:44.167513 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-22 11:46:44.167983 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-22 11:46:44.168368 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-22 11:46:44.169789 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-22 11:46:44.170124 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-22 11:46:44.170495 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-22 11:46:44.170869 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-22 11:46:44.171191 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-22 11:46:44.171455 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-22 11:46:44.171811 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-22 11:46:44.172063 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-22 11:46:44.172389 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-22 11:46:44.172690 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-22 11:46:44.174012 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-22 11:46:44.174293 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-22 11:46:44.174674 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-22 11:46:44.174977 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-22 11:46:44.175394 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-22 11:46:44.175718 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-22 11:46:44.176015 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-22 11:46:44.176317 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-22 11:46:44.176642 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-22 11:46:44.176960 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-22 11:46:44.177510 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-22 11:46:44.177812 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-22 11:46:44.178235 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-22 11:46:44.178530 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-22 11:46:44.178828 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-22 11:46:44.179167 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-22 11:46:44.179707 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-22 11:46:44.179952 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-22 11:46:44.180183 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-22 11:46:44.180417 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-22 11:46:44.180863 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-22 11:46:44.181132 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-22 11:46:44.181406 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-22 11:46:44.181695 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-22 11:46:44.182665 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-22 11:46:44.183011 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-22 11:46:44.187743 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-22 11:46:44.189442 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-22 11:46:44.190762 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-22 11:46:44.191103 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-22 11:46:44.191782 | debian-bookworm | Starting galaxy collection install process 2026-06-22 11:46:44.191935 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-22 11:46:44.271969 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-22 11:46:44.272052 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-22 11:46:44.289610 | debian-bookworm | INFO [delegated > create] Executing 2026-06-22 11:46:44.292469 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-22 11:46:44.302173 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-22 11:46:44.302269 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-22 11:46:44.302391 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-22 11:46:44.310253 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-22 11:46:44.569781 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-22 11:46:44.570632 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-22 11:46:44.571203 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-22 11:46:44.571721 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-22 11:46:44.572159 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-22 11:46:44.572541 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-22 11:46:44.573093 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-22 11:46:44.573467 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-22 11:46:44.574848 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-22 11:46:44.574903 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-22 11:46:44.574917 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-22 11:46:44.575040 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-22 11:46:44.575417 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-22 11:46:44.575780 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-22 11:46:44.576264 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-22 11:46:44.576737 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-22 11:46:44.577146 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-22 11:46:44.577481 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-22 11:46:44.577744 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-22 11:46:44.578046 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-22 11:46:44.578365 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-22 11:46:44.578682 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-22 11:46:44.578959 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-22 11:46:44.579254 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-22 11:46:44.579509 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-22 11:46:44.579856 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-22 11:46:44.580176 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-22 11:46:44.580431 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-22 11:46:44.580643 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-22 11:46:44.580881 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-22 11:46:44.581308 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-22 11:46:44.581588 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-22 11:46:44.582358 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-22 11:46:44.582654 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-22 11:46:44.583484 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-22 11:46:44.583777 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-22 11:46:44.585834 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-22 11:46:44.585862 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-22 11:46:44.585871 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-22 11:46:44.585878 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-22 11:46:44.585900 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-22 11:46:44.585907 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-22 11:46:44.585913 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-22 11:46:44.586185 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-22 11:46:44.586414 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-22 11:46:44.586684 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-22 11:46:44.600047 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-22 11:46:44.601388 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-22 11:46:44.602553 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-22 11:46:44.603122 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-22 11:46:44.603607 | ubuntu-noble | Starting galaxy collection install process 2026-06-22 11:46:44.604008 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-22 11:46:44.681487 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-22 11:46:44.682070 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-22 11:46:44.699949 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-22 11:46:44.702659 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-22 11:46:44.713256 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-22 11:46:44.713444 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-22 11:46:44.713595 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-22 11:46:44.725492 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-22 11:46:44.652535 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-22 11:46:44.652633 | debian-bookworm | config file = None 2026-06-22 11:46:44.652641 | debian-bookworm | configured module search path = 2026-06-22 11:46:44.652657 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-22 11:46:44.652664 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-22 11:46:44.652668 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-22 11:46:44.652673 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-22 11:46:44.652677 | debian-bookworm | jinja version = 3.1.6 2026-06-22 11:46:44.652681 | debian-bookworm | libyaml = True 2026-06-22 11:46:44.652806 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:46:44.652813 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:46:44.652817 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:46:44.652822 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:46:44.652826 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:46:44.652830 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-22 11:46:44.652834 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:46:44.652838 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-22 11:46:44.652842 | debian-bookworm | 2026-06-22 11:46:44.653036 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:46:44.653042 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-22 11:46:44.653046 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:46:44.653066 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-22 11:46:44.653070 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:46:44.653074 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:46:44.653082 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:46:44.653086 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:46:44.653090 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:46:44.653095 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:46:44.653098 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:46:44.653103 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:46:44.653107 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:46:44.653111 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:46:44.653114 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:46:44.653118 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:44.653123 | debian-bookworm | 2026-06-22 11:46:44.653396 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:44.939653 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-22 11:46:45.101589 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-22 11:46:45.101652 | ubuntu-noble | config file = None 2026-06-22 11:46:45.101661 | ubuntu-noble | configured module search path = 2026-06-22 11:46:45.101669 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-22 11:46:45.101691 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-22 11:46:45.101697 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-22 11:46:45.101702 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-22 11:46:45.101706 | ubuntu-noble | jinja version = 3.1.6 2026-06-22 11:46:45.101709 | ubuntu-noble | libyaml = True 2026-06-22 11:46:45.102033 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:46:45.102051 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:46:45.102056 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:46:45.102060 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:46:45.102064 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:46:45.102068 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-22 11:46:45.102072 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:46:45.102076 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-22 11:46:45.102081 | ubuntu-noble | 2026-06-22 11:46:45.102864 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:46:45.102889 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-22 11:46:45.102894 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:46:45.102912 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-22 11:46:45.102916 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:46:45.102921 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:46:45.102925 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:46:45.102929 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:46:45.102933 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:46:45.102937 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:46:45.102941 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:46:45.102945 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:46:45.102949 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:46:45.102953 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:46:45.102956 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:46:45.102960 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:45.102965 | ubuntu-noble | 2026-06-22 11:46:45.102979 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:46:45.414568 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-22 11:46:45.185233 | debian-bookworm | 2026-06-22 11:46:45.185559 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-22 11:46:45.185944 | debian-bookworm | 2026-06-22 11:46:45.186228 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-22 11:46:45.652696 | ubuntu-noble | 2026-06-22 11:46:45.653438 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-22 11:46:45.654873 | ubuntu-noble | 2026-06-22 11:46:45.654904 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-22 11:46:46.307177 | debian-bookworm | ok: [molecule-auditd] 2026-06-22 11:46:46.307275 | debian-bookworm | 2026-06-22 11:46:46.307417 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-22 11:46:46.345182 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-22 11:46:46.345451 | debian-bookworm | 2026-06-22 11:46:46.345789 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-22 11:46:46.404105 | debian-bookworm | included: auditd for molecule-auditd 2026-06-22 11:46:46.404390 | debian-bookworm | 2026-06-22 11:46:46.404736 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-22 11:46:46.433181 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-22 11:46:46.433420 | debian-bookworm | 2026-06-22 11:46:46.433735 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-22 11:46:46.928880 | ubuntu-noble | ok: [molecule-auditd] 2026-06-22 11:46:46.928946 | ubuntu-noble | 2026-06-22 11:46:46.928980 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-22 11:46:46.964894 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-22 11:46:46.965012 | ubuntu-noble | 2026-06-22 11:46:46.965145 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-22 11:46:47.035359 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-22 11:46:47.035581 | ubuntu-noble | 2026-06-22 11:46:47.035880 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-22 11:46:47.067654 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-22 11:46:47.067860 | ubuntu-noble | 2026-06-22 11:46:47.068165 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-22 11:46:50.485838 | debian-bookworm | The following additional packages will be installed: 2026-06-22 11:46:50.485956 | debian-bookworm | libauparse0 2026-06-22 11:46:50.486089 | debian-bookworm | Suggested packages: 2026-06-22 11:46:50.486220 | debian-bookworm | audispd-plugins 2026-06-22 11:46:50.486344 | debian-bookworm | The following NEW packages will be installed: 2026-06-22 11:46:50.486519 | debian-bookworm | auditd libauparse0 2026-06-22 11:46:50.486659 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-22 11:46:50.487627 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1782128692, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3382 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28691 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3382 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28691 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-22 11:46:50.487684 | debian-bookworm | 2026-06-22 11:46:50.487810 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-22 11:46:51.729573 | ubuntu-noble | The following additional packages will be installed: 2026-06-22 11:46:51.729655 | ubuntu-noble | libauparse0t64 2026-06-22 11:46:51.729712 | ubuntu-noble | Suggested packages: 2026-06-22 11:46:51.729825 | ubuntu-noble | audispd-plugins 2026-06-22 11:46:51.731857 | ubuntu-noble | The following NEW packages will be installed: 2026-06-22 11:46:51.731909 | ubuntu-noble | auditd libauparse0t64 2026-06-22 11:46:51.731918 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-22 11:46:51.732000 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1782128695, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2700 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36085 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2700 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36085 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-22 11:46:51.732030 | ubuntu-noble | 2026-06-22 11:46:51.732043 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-22 11:46:53.206466 | debian-bookworm | The following NEW packages will be installed: 2026-06-22 11:46:53.206581 | debian-bookworm | audispd-plugins 2026-06-22 11:46:53.206787 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-22 11:46:53.207024 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1782128692, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (912 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28782 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (912 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28782 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-22 11:46:53.207185 | debian-bookworm | 2026-06-22 11:46:53.207360 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-22 11:46:54.347738 | debian-bookworm | --- before 2026-06-22 11:46:54.347881 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-219012j830m8/tmpogo3wckr/auditd.conf.j2 2026-06-22 11:46:54.347894 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-22 11:46:54.347913 | debian-bookworm | +# 2026-06-22 11:46:54.347924 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-22 11:46:54.347935 | debian-bookworm | +# 2026-06-22 11:46:54.348042 | debian-bookworm | + 2026-06-22 11:46:54.348134 | debian-bookworm | +local_events = yes 2026-06-22 11:46:54.348232 | debian-bookworm | +write_logs = yes 2026-06-22 11:46:54.348334 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-22 11:46:54.348433 | debian-bookworm | +log_group = adm 2026-06-22 11:46:54.348531 | debian-bookworm | +log_format = RAW 2026-06-22 11:46:54.348640 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-22 11:46:54.348738 | debian-bookworm | +freq = 50 2026-06-22 11:46:54.348833 | debian-bookworm | +max_log_file = 8 2026-06-22 11:46:54.348933 | debian-bookworm | +num_logs = 5 2026-06-22 11:46:54.349023 | debian-bookworm | +priority_boost = 4 2026-06-22 11:46:54.349118 | debian-bookworm | +disp_qos = lossy 2026-06-22 11:46:54.349211 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-22 11:46:54.349305 | debian-bookworm | +name_format = NONE 2026-06-22 11:46:54.349398 | debian-bookworm | +##name = mydomain 2026-06-22 11:46:54.349495 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-22 11:46:54.349591 | debian-bookworm | +space_left = 12361 2026-06-22 11:46:54.349721 | debian-bookworm | +space_left_action = email 2026-06-22 11:46:54.349814 | debian-bookworm | +verify_email = yes 2026-06-22 11:46:54.349910 | debian-bookworm | +action_mail_acct = root 2026-06-22 11:46:54.350006 | debian-bookworm | +admin_space_left = 50 2026-06-22 11:46:54.350105 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-22 11:46:54.350201 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-22 11:46:54.350297 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-22 11:46:54.350443 | debian-bookworm | +use_libwrap = yes 2026-06-22 11:46:54.350543 | debian-bookworm | +##tcp_listen_port = 60 2026-06-22 11:46:54.350912 | debian-bookworm | +tcp_listen_queue = 5 2026-06-22 11:46:54.351027 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-22 11:46:54.351126 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-22 11:46:54.351235 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-22 11:46:54.351330 | debian-bookworm | +enable_krb5 = no 2026-06-22 11:46:54.351423 | debian-bookworm | +krb5_principal = auditd 2026-06-22 11:46:54.351523 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-22 11:46:54.351648 | debian-bookworm | +distribute_network = no 2026-06-22 11:46:54.351744 | debian-bookworm | 2026-06-22 11:46:54.351870 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782128813.2264543-2560-204268048904522/.source.conf", "state": "file", "uid": 0} 2026-06-22 11:46:54.351951 | debian-bookworm | 2026-06-22 11:46:54.352058 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-22 11:46:54.767136 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-22 11:46:54.767262 | debian-bookworm | 2026-06-22 11:46:54.767273 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-22 11:46:55.174524 | ubuntu-noble | The following NEW packages will be installed: 2026-06-22 11:46:55.174636 | ubuntu-noble | audispd-plugins 2026-06-22 11:46:55.174743 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-22 11:46:55.174974 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1782128695, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (527 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36181 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (527 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36181 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-22 11:46:55.175066 | ubuntu-noble | 2026-06-22 11:46:55.175170 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-22 11:46:55.552930 | debian-bookworm | --- before 2026-06-22 11:46:55.553006 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-219012j830m8/tmp8bc49xw8/20-neo23x0.rules.j2 2026-06-22 11:46:55.553111 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-22 11:46:55.553153 | debian-bookworm | +# ___ ___ __ __ 2026-06-22 11:46:55.553253 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-22 11:46:55.553367 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-22 11:46:55.553468 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-22 11:46:55.553560 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-22 11:46:55.554138 | debian-bookworm | +# 2026-06-22 11:46:55.554218 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-22 11:46:55.554235 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-22 11:46:55.554247 | debian-bookworm | +# 2026-06-22 11:46:55.554257 | debian-bookworm | +# Compiled by Florian Roth 2026-06-22 11:46:55.554277 | debian-bookworm | +# 2026-06-22 11:46:55.554288 | debian-bookworm | +# Created : 2017/12/05 2026-06-22 11:46:55.554348 | debian-bookworm | +# Modified : 2023/01/25 2026-06-22 11:46:55.554727 | debian-bookworm | +# 2026-06-22 11:46:55.554825 | debian-bookworm | +# Based on rules published here: 2026-06-22 11:46:55.554905 | debian-bookworm | +# Gov.uk auditd rules 2026-06-22 11:46:55.555208 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-22 11:46:55.555369 | debian-bookworm | +# CentOS 7 hardening 2026-06-22 11:46:55.555528 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-22 11:46:55.555722 | debian-bookworm | +# Linux audit repo 2026-06-22 11:46:55.555876 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-22 11:46:55.556026 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-22 11:46:55.556154 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-22 11:46:55.556252 | debian-bookworm | +# 2026-06-22 11:46:55.556348 | debian-bookworm | +# Further rules 2026-06-22 11:46:55.556486 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-22 11:46:55.556677 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-22 11:46:55.558034 | debian-bookworm | +# For NISPOM compliance see: 2026-06-22 11:46:55.558208 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-22 11:46:55.558311 | debian-bookworm | + 2026-06-22 11:46:55.558629 | debian-bookworm | +# Remove any existing rules 2026-06-22 11:46:55.559131 | debian-bookworm | +-D 2026-06-22 11:46:55.559462 | debian-bookworm | + 2026-06-22 11:46:55.559834 | debian-bookworm | +# Buffer Size 2026-06-22 11:46:55.560140 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-22 11:46:55.560428 | debian-bookworm | +-b 8192 2026-06-22 11:46:55.560749 | debian-bookworm | + 2026-06-22 11:46:55.561041 | debian-bookworm | +# Failure Mode 2026-06-22 11:46:55.561340 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-22 11:46:55.561647 | debian-bookworm | +-f 1 2026-06-22 11:46:55.561928 | debian-bookworm | + 2026-06-22 11:46:55.562215 | debian-bookworm | +# Ignore errors 2026-06-22 11:46:55.562642 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-22 11:46:55.562947 | debian-bookworm | +-i 2026-06-22 11:46:55.563233 | debian-bookworm | + 2026-06-22 11:46:55.563518 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-22 11:46:55.563819 | debian-bookworm | + 2026-06-22 11:46:55.564115 | debian-bookworm | +## Audit the audit logs 2026-06-22 11:46:55.564407 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-22 11:46:55.564752 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-22 11:46:55.565043 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-22 11:46:55.565289 | debian-bookworm | + 2026-06-22 11:46:55.565515 | debian-bookworm | +## Auditd configuration 2026-06-22 11:46:55.565773 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-22 11:46:55.566008 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-22 11:46:55.566257 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-22 11:46:55.566550 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-22 11:46:55.566844 | debian-bookworm | + 2026-06-22 11:46:55.567081 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-22 11:46:55.567289 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-22 11:46:55.567485 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-22 11:46:55.567700 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-22 11:46:55.567900 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-22 11:46:55.568090 | debian-bookworm | + 2026-06-22 11:46:55.568285 | debian-bookworm | +## Access to all audit trails 2026-06-22 11:46:55.568478 | debian-bookworm | + 2026-06-22 11:46:55.568702 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-22 11:46:55.568903 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-22 11:46:55.569105 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-22 11:46:55.569308 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-22 11:46:55.569510 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-22 11:46:55.569724 | debian-bookworm | + 2026-06-22 11:46:55.569921 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-22 11:46:55.570118 | debian-bookworm | + 2026-06-22 11:46:55.570337 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-22 11:46:55.570568 | debian-bookworm | + 2026-06-22 11:46:55.570789 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-22 11:46:55.570996 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-22 11:46:55.571190 | debian-bookworm | + 2026-06-22 11:46:55.571390 | debian-bookworm | +## Ignore current working directory records 2026-06-22 11:46:55.571587 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-22 11:46:55.571835 | debian-bookworm | + 2026-06-22 11:46:55.572040 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-22 11:46:55.572234 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-22 11:46:55.572416 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-22 11:46:55.572594 | debian-bookworm | + 2026-06-22 11:46:55.572803 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-22 11:46:55.572995 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-22 11:46:55.573174 | debian-bookworm | + 2026-06-22 11:46:55.573359 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-22 11:46:55.573562 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-22 11:46:55.573786 | debian-bookworm | + 2026-06-22 11:46:55.573976 | debian-bookworm | +## Open VM Tools 2026-06-22 11:46:55.574164 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-22 11:46:55.574320 | debian-bookworm | + 2026-06-22 11:46:55.574522 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-22 11:46:55.574704 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-22 11:46:55.574866 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-22 11:46:55.575026 | debian-bookworm | + 2026-06-22 11:46:55.575189 | debian-bookworm | +## FileBeat 2026-06-22 11:46:55.575351 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-22 11:46:55.575506 | debian-bookworm | + 2026-06-22 11:46:55.575680 | debian-bookworm | +## More information on how to filter events 2026-06-22 11:46:55.575844 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-22 11:46:55.575997 | debian-bookworm | + 2026-06-22 11:46:55.576157 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-22 11:46:55.576313 | debian-bookworm | + 2026-06-22 11:46:55.576471 | debian-bookworm | +## Kernel parameters 2026-06-22 11:46:55.576649 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-22 11:46:55.576811 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-22 11:46:55.576965 | debian-bookworm | + 2026-06-22 11:46:55.577125 | debian-bookworm | +## Kernel module loading and unloading 2026-06-22 11:46:55.577289 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-22 11:46:55.577455 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-22 11:46:55.577663 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-22 11:46:55.577836 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-22 11:46:55.577977 | debian-bookworm | + 2026-06-22 11:46:55.578124 | debian-bookworm | +## Modprobe configuration 2026-06-22 11:46:55.578273 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-22 11:46:55.578437 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-22 11:46:55.578581 | debian-bookworm | + 2026-06-22 11:46:55.578740 | debian-bookworm | +## KExec usage (all actions) 2026-06-22 11:46:55.578888 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-22 11:46:55.579028 | debian-bookworm | + 2026-06-22 11:46:55.579169 | debian-bookworm | +## Special files 2026-06-22 11:46:55.579313 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-22 11:46:55.579453 | debian-bookworm | + 2026-06-22 11:46:55.579635 | debian-bookworm | +## Mount operations (only attributable) 2026-06-22 11:46:55.579796 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-22 11:46:55.579938 | debian-bookworm | + 2026-06-22 11:46:55.580082 | debian-bookworm | +### NFS mount 2026-06-22 11:46:55.580245 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.580397 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.580532 | debian-bookworm | + 2026-06-22 11:46:55.580685 | debian-bookworm | +## Change swap (only attributable) 2026-06-22 11:46:55.580829 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-22 11:46:55.580975 | debian-bookworm | + 2026-06-22 11:46:55.581112 | debian-bookworm | +## Time 2026-06-22 11:46:55.581251 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-22 11:46:55.581386 | debian-bookworm | +### Local time zone 2026-06-22 11:46:55.581520 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-22 11:46:55.581667 | debian-bookworm | + 2026-06-22 11:46:55.581803 | debian-bookworm | +## Stunnel 2026-06-22 11:46:55.581947 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-22 11:46:55.582082 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-22 11:46:55.582215 | debian-bookworm | + 2026-06-22 11:46:55.582351 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-22 11:46:55.582529 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-22 11:46:55.582710 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-22 11:46:55.582850 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-22 11:46:55.582987 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-22 11:46:55.583115 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-22 11:46:55.583237 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-22 11:46:55.583358 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-22 11:46:55.583480 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-22 11:46:55.583616 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-22 11:46:55.583742 | debian-bookworm | + 2026-06-22 11:46:55.583866 | debian-bookworm | +## User, group, password databases 2026-06-22 11:46:55.583988 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-22 11:46:55.584110 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-22 11:46:55.584237 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-22 11:46:55.584364 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-22 11:46:55.584487 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-22 11:46:55.584638 | debian-bookworm | + 2026-06-22 11:46:55.584768 | debian-bookworm | +## Sudoers file changes 2026-06-22 11:46:55.584888 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-22 11:46:55.584999 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-22 11:46:55.585107 | debian-bookworm | + 2026-06-22 11:46:55.585218 | debian-bookworm | +## Passwd 2026-06-22 11:46:55.585335 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-22 11:46:55.585443 | debian-bookworm | + 2026-06-22 11:46:55.585556 | debian-bookworm | +## Tools to change group identifiers 2026-06-22 11:46:55.585686 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-22 11:46:55.585800 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-22 11:46:55.585912 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-22 11:46:55.586024 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-22 11:46:55.586135 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-22 11:46:55.586249 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-22 11:46:55.586363 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-22 11:46:55.586509 | debian-bookworm | + 2026-06-22 11:46:55.586636 | debian-bookworm | +## Login configuration and information 2026-06-22 11:46:55.586751 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-22 11:46:55.586862 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-22 11:46:55.586976 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-22 11:46:55.587085 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-22 11:46:55.587197 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-22 11:46:55.587312 | debian-bookworm | + 2026-06-22 11:46:55.587423 | debian-bookworm | +## Network Environment 2026-06-22 11:46:55.587535 | debian-bookworm | +### Changes to hostname 2026-06-22 11:46:55.587685 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-22 11:46:55.587796 | debian-bookworm | + 2026-06-22 11:46:55.587906 | debian-bookworm | +### Detect Remote Shell Use 2026-06-22 11:46:55.588021 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-22 11:46:55.588136 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-22 11:46:55.588244 | debian-bookworm | + 2026-06-22 11:46:55.588354 | debian-bookworm | +### Successful IPv4 Connections 2026-06-22 11:46:55.588467 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-22 11:46:55.588576 | debian-bookworm | + 2026-06-22 11:46:55.588704 | debian-bookworm | +### Successful IPv6 Connections 2026-06-22 11:46:55.588817 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-22 11:46:55.588927 | debian-bookworm | + 2026-06-22 11:46:55.589049 | debian-bookworm | +### Changes to other files 2026-06-22 11:46:55.589162 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-22 11:46:55.589274 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-22 11:46:55.589391 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-22 11:46:55.589501 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-22 11:46:55.589629 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-22 11:46:55.589740 | debian-bookworm | + 2026-06-22 11:46:55.589851 | debian-bookworm | +### Changes to issue 2026-06-22 11:46:55.589963 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-22 11:46:55.590080 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-22 11:46:55.590190 | debian-bookworm | + 2026-06-22 11:46:55.590303 | debian-bookworm | +## System startup scripts 2026-06-22 11:46:55.590447 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-22 11:46:55.590564 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-22 11:46:55.590690 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-22 11:46:55.590799 | debian-bookworm | + 2026-06-22 11:46:55.590912 | debian-bookworm | +## Library search paths 2026-06-22 11:46:55.591024 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-22 11:46:55.591135 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-22 11:46:55.591244 | debian-bookworm | + 2026-06-22 11:46:55.591359 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-22 11:46:55.591472 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-22 11:46:55.591579 | debian-bookworm | + 2026-06-22 11:46:55.591730 | debian-bookworm | +## Pam configuration 2026-06-22 11:46:55.591843 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-22 11:46:55.591958 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-22 11:46:55.592071 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-22 11:46:55.592184 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-22 11:46:55.592296 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-22 11:46:55.592406 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-22 11:46:55.592522 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-22 11:46:55.592647 | debian-bookworm | + 2026-06-22 11:46:55.592761 | debian-bookworm | +## Mail configuration 2026-06-22 11:46:55.592874 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-22 11:46:55.592985 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-22 11:46:55.593096 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-22 11:46:55.593205 | debian-bookworm | + 2026-06-22 11:46:55.593316 | debian-bookworm | +## SSH configuration 2026-06-22 11:46:55.593429 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-22 11:46:55.593543 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-22 11:46:55.593667 | debian-bookworm | + 2026-06-22 11:46:55.593784 | debian-bookworm | +## root ssh key tampering 2026-06-22 11:46:55.593895 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-22 11:46:55.594004 | debian-bookworm | + 2026-06-22 11:46:55.594115 | debian-bookworm | +# Systemd 2026-06-22 11:46:55.594227 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-22 11:46:55.594463 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-22 11:46:55.594640 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-22 11:46:55.594763 | debian-bookworm | + 2026-06-22 11:46:55.594902 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-22 11:46:55.595015 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:55.595130 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:55.595241 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-22 11:46:55.595349 | debian-bookworm | + 2026-06-22 11:46:55.595459 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-22 11:46:55.595569 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-22 11:46:55.595696 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:55.595805 | debian-bookworm | + 2026-06-22 11:46:55.595918 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-22 11:46:55.596029 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-22 11:46:55.596138 | debian-bookworm | + 2026-06-22 11:46:55.596250 | debian-bookworm | +## Critical elements access failures 2026-06-22 11:46:55.596368 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.596494 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.596727 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.596870 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.596985 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.597098 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.597209 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.597325 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-22 11:46:55.597434 | debian-bookworm | + 2026-06-22 11:46:55.597545 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-22 11:46:55.597674 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-22 11:46:55.597790 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-22 11:46:55.597897 | debian-bookworm | + 2026-06-22 11:46:55.598008 | debian-bookworm | +## Power state 2026-06-22 11:46:55.598117 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-22 11:46:55.598226 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-22 11:46:55.598335 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-22 11:46:55.598477 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-22 11:46:55.598589 | debian-bookworm | + 2026-06-22 11:46:55.598745 | debian-bookworm | +## Session initiation information 2026-06-22 11:46:55.598858 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-22 11:46:55.598970 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-22 11:46:55.599080 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-22 11:46:55.599186 | debian-bookworm | + 2026-06-22 11:46:55.599300 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-22 11:46:55.599413 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.599527 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.599651 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.599765 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.599886 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600001 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600115 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600230 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600342 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600453 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600567 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600719 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600837 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:55.600946 | debian-bookworm | + 2026-06-22 11:46:55.601057 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-22 11:46:55.601164 | debian-bookworm | + 2026-06-22 11:46:55.601274 | debian-bookworm | +## Reconnaissance 2026-06-22 11:46:55.601386 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-22 11:46:55.601499 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-22 11:46:55.601626 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-22 11:46:55.601737 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-22 11:46:55.601848 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-22 11:46:55.601957 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-22 11:46:55.602066 | debian-bookworm | + 2026-06-22 11:46:55.602176 | debian-bookworm | +## Suspicious activity 2026-06-22 11:46:55.602288 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-22 11:46:55.602428 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-22 11:46:55.602665 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-22 11:46:55.602793 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-22 11:46:55.602906 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-22 11:46:55.603029 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-22 11:46:55.603146 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-22 11:46:55.603267 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-22 11:46:55.603380 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-22 11:46:55.603491 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-22 11:46:55.603616 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-22 11:46:55.603730 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-22 11:46:55.603842 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-22 11:46:55.603953 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-22 11:46:55.604063 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-22 11:46:55.604174 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-22 11:46:55.604285 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-22 11:46:55.604398 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-22 11:46:55.604509 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-22 11:46:55.604630 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-22 11:46:55.604744 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-22 11:46:55.604857 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-22 11:46:55.604966 | debian-bookworm | + 2026-06-22 11:46:55.605079 | debian-bookworm | +## sssd 2026-06-22 11:46:55.605211 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.605329 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.605442 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.605555 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.605710 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.605821 | debian-bookworm | + 2026-06-22 11:46:55.605933 | debian-bookworm | +## T1002 Data Compressed 2026-06-22 11:46:55.606040 | debian-bookworm | + 2026-06-22 11:46:55.606151 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-22 11:46:55.606261 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-22 11:46:55.606400 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-22 11:46:55.606516 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-22 11:46:55.606643 | debian-bookworm | + 2026-06-22 11:46:55.606756 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-22 11:46:55.606869 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-22 11:46:55.606977 | debian-bookworm | + 2026-06-22 11:46:55.607087 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-22 11:46:55.607206 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-22 11:46:55.607314 | debian-bookworm | + 2026-06-22 11:46:55.607426 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-22 11:46:55.607537 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-22 11:46:55.607675 | debian-bookworm | + 2026-06-22 11:46:55.607790 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-22 11:46:55.607902 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-22 11:46:55.608009 | debian-bookworm | + 2026-06-22 11:46:55.608121 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-22 11:46:55.608231 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-22 11:46:55.608339 | debian-bookworm | + 2026-06-22 11:46:55.608448 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-22 11:46:55.608560 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-22 11:46:55.608681 | debian-bookworm | + 2026-06-22 11:46:55.608793 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-22 11:46:55.608903 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-22 11:46:55.609009 | debian-bookworm | + 2026-06-22 11:46:55.609126 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-22 11:46:55.609237 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-22 11:46:55.609348 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-22 11:46:55.609462 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-22 11:46:55.609569 | debian-bookworm | + 2026-06-22 11:46:55.609694 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-22 11:46:55.609806 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-22 11:46:55.609922 | debian-bookworm | + 2026-06-22 11:46:55.610033 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-22 11:46:55.610145 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-22 11:46:55.610257 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-22 11:46:55.610365 | debian-bookworm | + 2026-06-22 11:46:55.610509 | debian-bookworm | +## Sbin suspicious activity 2026-06-22 11:46:55.610651 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-22 11:46:55.610770 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-22 11:46:55.610881 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-22 11:46:55.610992 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-22 11:46:55.611103 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-22 11:46:55.611220 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-22 11:46:55.611330 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-22 11:46:55.611439 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-22 11:46:55.611550 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-22 11:46:55.611673 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-22 11:46:55.611781 | debian-bookworm | + 2026-06-22 11:46:55.611891 | debian-bookworm | +### kde4 2026-06-22 11:46:55.612015 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.612131 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:55.612241 | debian-bookworm | + 2026-06-22 11:46:55.612350 | debian-bookworm | +## dbus-send invocation 2026-06-22 11:46:55.612463 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-22 11:46:55.612573 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-22 11:46:55.612699 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-22 11:46:55.612809 | debian-bookworm | + 2026-06-22 11:46:55.612920 | debian-bookworm | +## pkexec invocation 2026-06-22 11:46:55.613034 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-22 11:46:55.613143 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-22 11:46:55.613250 | debian-bookworm | + 2026-06-22 11:46:55.613361 | debian-bookworm | +## Suspicious shells 2026-06-22 11:46:55.613471 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-22 11:46:55.613584 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-22 11:46:55.613724 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-22 11:46:55.613837 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-22 11:46:55.613948 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-22 11:46:55.614058 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-22 11:46:55.614169 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-22 11:46:55.614277 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-22 11:46:55.614405 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-22 11:46:55.614516 | debian-bookworm | + 2026-06-22 11:46:55.614640 | debian-bookworm | +# Web Server Actvity 2026-06-22 11:46:55.614757 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-22 11:46:55.614869 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-22 11:46:55.614977 | debian-bookworm | + 2026-06-22 11:46:55.615088 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-22 11:46:55.615197 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-22 11:46:55.615305 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-22 11:46:55.615418 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-22 11:46:55.615526 | debian-bookworm | + 2026-06-22 11:46:55.615665 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-22 11:46:55.615780 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-22 11:46:55.615893 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-22 11:46:55.616003 | debian-bookworm | + 2026-06-22 11:46:55.616121 | debian-bookworm | +## Shell/profile configurations 2026-06-22 11:46:55.616233 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-22 11:46:55.616342 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-22 11:46:55.616452 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-22 11:46:55.616560 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-22 11:46:55.616684 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-22 11:46:55.616796 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-22 11:46:55.616906 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-22 11:46:55.617020 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-22 11:46:55.617138 | debian-bookworm | + 2026-06-22 11:46:55.617285 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-22 11:46:55.617400 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-22 11:46:55.617514 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-22 11:46:55.617639 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-22 11:46:55.617751 | debian-bookworm | + 2026-06-22 11:46:55.617864 | debian-bookworm | +## Injection 2026-06-22 11:46:55.617980 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-22 11:46:55.618094 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-22 11:46:55.618209 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-22 11:46:55.618323 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-22 11:46:55.618453 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-22 11:46:55.618568 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-22 11:46:55.618708 | debian-bookworm | + 2026-06-22 11:46:55.618823 | debian-bookworm | +## Anonymous File Creation 2026-06-22 11:46:55.618935 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-22 11:46:55.619048 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-22 11:46:55.619170 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-22 11:46:55.619285 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-22 11:46:55.619392 | debian-bookworm | + 2026-06-22 11:46:55.619504 | debian-bookworm | +## Privilege Abuse 2026-06-22 11:46:55.619635 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-22 11:46:55.619759 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-22 11:46:55.619867 | debian-bookworm | + 2026-06-22 11:46:55.619980 | debian-bookworm | +# Socket Creations 2026-06-22 11:46:55.620092 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-22 11:46:55.620201 | debian-bookworm | + 2026-06-22 11:46:55.620316 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-22 11:46:55.620432 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-22 11:46:55.620540 | debian-bookworm | + 2026-06-22 11:46:55.620709 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-22 11:46:55.620831 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-22 11:46:55.620938 | debian-bookworm | + 2026-06-22 11:46:55.621051 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-22 11:46:55.621161 | debian-bookworm | + 2026-06-22 11:46:55.621274 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-22 11:46:55.621387 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-22 11:46:55.621503 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-22 11:46:55.621629 | debian-bookworm | + 2026-06-22 11:46:55.621743 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-22 11:46:55.621854 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-22 11:46:55.621962 | debian-bookworm | + 2026-06-22 11:46:55.622073 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-22 11:46:55.622184 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-22 11:46:55.622295 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-22 11:46:55.622425 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-22 11:46:55.622545 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-22 11:46:55.622669 | debian-bookworm | + 2026-06-22 11:46:55.622780 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-22 11:46:55.622892 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-22 11:46:55.623005 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-22 11:46:55.623119 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-22 11:46:55.623233 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-22 11:46:55.623345 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-22 11:46:55.623460 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-22 11:46:55.623572 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-22 11:46:55.623694 | debian-bookworm | + 2026-06-22 11:46:55.623806 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-22 11:46:55.623919 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624033 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624158 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624271 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624383 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624499 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-22 11:46:55.624640 | debian-bookworm | + 2026-06-22 11:46:55.624759 | debian-bookworm | +# npm 2026-06-22 11:46:55.624874 | debian-bookworm | +## T1072 third party software 2026-06-22 11:46:55.624987 | debian-bookworm | +## https://www.npmjs.com 2026-06-22 11:46:55.625101 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-22 11:46:55.625216 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-22 11:46:55.625326 | debian-bookworm | + 2026-06-22 11:46:55.625440 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-22 11:46:55.625552 | debian-bookworm | +## T1072 third party software 2026-06-22 11:46:55.625678 | debian-bookworm | +## https://www.cpan.org 2026-06-22 11:46:55.625791 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-22 11:46:55.625900 | debian-bookworm | + 2026-06-22 11:46:55.626010 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-22 11:46:55.626121 | debian-bookworm | +## T1072 third party software 2026-06-22 11:46:55.626234 | debian-bookworm | +## https://rubygems.org 2026-06-22 11:46:55.626347 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-22 11:46:55.626482 | debian-bookworm | + 2026-06-22 11:46:55.626606 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-22 11:46:55.626723 | debian-bookworm | +## T1072 third party software 2026-06-22 11:46:55.626835 | debian-bookworm | +## https://luarocks.org 2026-06-22 11:46:55.626950 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-22 11:46:55.627059 | debian-bookworm | + 2026-06-22 11:46:55.627171 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-22 11:46:55.627287 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-22 11:46:55.627398 | debian-bookworm | +## T1072 third party software 2026-06-22 11:46:55.627518 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-22 11:46:55.627649 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-22 11:46:55.627761 | debian-bookworm | + 2026-06-22 11:46:55.627874 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-22 11:46:55.627982 | debian-bookworm | + 2026-06-22 11:46:55.628096 | debian-bookworm | +## GDS specific secrets 2026-06-22 11:46:55.628209 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-22 11:46:55.628319 | debian-bookworm | + 2026-06-22 11:46:55.628431 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-22 11:46:55.628547 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-22 11:46:55.628695 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-22 11:46:55.628808 | debian-bookworm | + 2026-06-22 11:46:55.628921 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-22 11:46:55.629032 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-22 11:46:55.629139 | debian-bookworm | + 2026-06-22 11:46:55.629250 | debian-bookworm | +## Salt 2026-06-22 11:46:55.629363 | debian-bookworm | +## https://saltproject.io/ 2026-06-22 11:46:55.629480 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-22 11:46:55.629595 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-22 11:46:55.629725 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-22 11:46:55.629835 | debian-bookworm | + 2026-06-22 11:46:55.629946 | debian-bookworm | +## Otter 2026-06-22 11:46:55.630058 | debian-bookworm | +## https://inedo.com/otter 2026-06-22 11:46:55.630170 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-22 11:46:55.630280 | debian-bookworm | + 2026-06-22 11:46:55.630410 | debian-bookworm | +## T1081 Credentials In Files 2026-06-22 11:46:55.630525 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-22 11:46:55.630654 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-22 11:46:55.630768 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-22 11:46:55.630880 | debian-bookworm | +### macOS 2026-06-22 11:46:55.630994 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-22 11:46:55.631107 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-22 11:46:55.631220 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-22 11:46:55.631328 | debian-bookworm | + 2026-06-22 11:46:55.631447 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-22 11:46:55.631560 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-22 11:46:55.631702 | debian-bookworm | +### macOS 2026-06-22 11:46:55.631819 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-22 11:46:55.631939 | debian-bookworm | + 2026-06-22 11:46:55.632056 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-22 11:46:55.632167 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-22 11:46:55.632276 | debian-bookworm | +### macOS 2026-06-22 11:46:55.632387 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-22 11:46:55.632496 | debian-bookworm | + 2026-06-22 11:46:55.632630 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-22 11:46:55.632740 | debian-bookworm | + 2026-06-22 11:46:55.632856 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-22 11:46:55.632966 | debian-bookworm | +### macOS 2026-06-22 11:46:55.633080 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-22 11:46:55.633188 | debian-bookworm | + 2026-06-22 11:46:55.633300 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-22 11:46:55.633413 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-22 11:46:55.633523 | debian-bookworm | +### macOS 2026-06-22 11:46:55.633648 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-22 11:46:55.633760 | debian-bookworm | + 2026-06-22 11:46:55.633872 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-22 11:46:55.633982 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-22 11:46:55.634092 | debian-bookworm | +### macOS 2026-06-22 11:46:55.634202 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-22 11:46:55.634310 | debian-bookworm | + 2026-06-22 11:46:55.634450 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-22 11:46:55.634566 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-22 11:46:55.634693 | debian-bookworm | +### macOS 2026-06-22 11:46:55.634807 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-22 11:46:55.634919 | debian-bookworm | + 2026-06-22 11:46:55.635030 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-22 11:46:55.635140 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-22 11:46:55.635249 | debian-bookworm | +### macOS 2026-06-22 11:46:55.635361 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-22 11:46:55.635470 | debian-bookworm | + 2026-06-22 11:46:55.635582 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-22 11:46:55.635726 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-22 11:46:55.635838 | debian-bookworm | +### macOS 2026-06-22 11:46:55.635958 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-22 11:46:55.636069 | debian-bookworm | + 2026-06-22 11:46:55.636180 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-22 11:46:55.636292 | debian-bookworm | +### https://beyondgrep.com 2026-06-22 11:46:55.636405 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-22 11:46:55.636517 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-22 11:46:55.636642 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-22 11:46:55.636754 | debian-bookworm | +### macOS 2026-06-22 11:46:55.636870 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-22 11:46:55.636978 | debian-bookworm | + 2026-06-22 11:46:55.637088 | debian-bookworm | +## Docker 2026-06-22 11:46:55.637200 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-22 11:46:55.637311 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-22 11:46:55.637423 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-22 11:46:55.637533 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-22 11:46:55.637673 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-22 11:46:55.637789 | debian-bookworm | +-w /etc/docker -k docker 2026-06-22 11:46:55.637901 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-22 11:46:55.638013 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-22 11:46:55.638125 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-22 11:46:55.638236 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-22 11:46:55.638343 | debian-bookworm | + 2026-06-22 11:46:55.638474 | debian-bookworm | +## Virtualization stuff 2026-06-22 11:46:55.638590 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-22 11:46:55.638713 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-22 11:46:55.638822 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-22 11:46:55.638932 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-22 11:46:55.639045 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-22 11:46:55.639157 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-22 11:46:55.639268 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-22 11:46:55.639377 | debian-bookworm | + 2026-06-22 11:46:55.639488 | debian-bookworm | +#### VirtualBox on macOS 2026-06-22 11:46:55.639606 | debian-bookworm | + 2026-06-22 11:46:55.639726 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-22 11:46:55.639847 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-22 11:46:55.639959 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-22 11:46:55.640070 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-22 11:46:55.640184 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-22 11:46:55.640297 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-22 11:46:55.640407 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-22 11:46:55.640517 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-22 11:46:55.640659 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-22 11:46:55.640777 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-22 11:46:55.640891 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-22 11:46:55.641006 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-22 11:46:55.641185 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-22 11:46:55.641304 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-22 11:46:55.641417 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-22 11:46:55.641528 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-22 11:46:55.641657 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-22 11:46:55.641769 | debian-bookworm | + 2026-06-22 11:46:55.641881 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-22 11:46:55.641988 | debian-bookworm | + 2026-06-22 11:46:55.642099 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-22 11:46:55.642208 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-22 11:46:55.642321 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-22 11:46:55.642459 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-22 11:46:55.642580 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-22 11:46:55.642709 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-22 11:46:55.642818 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-22 11:46:55.642932 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-22 11:46:55.643041 | debian-bookworm | + 2026-06-22 11:46:55.643153 | debian-bookworm | +### qemu on macOS 2026-06-22 11:46:55.643260 | debian-bookworm | + 2026-06-22 11:46:55.643374 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-22 11:46:55.643484 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-22 11:46:55.643625 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-22 11:46:55.643746 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-22 11:46:55.643867 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-22 11:46:55.643978 | debian-bookworm | + 2026-06-22 11:46:55.644088 | debian-bookworm | +## Kubelet 2026-06-22 11:46:55.644198 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-22 11:46:55.644307 | debian-bookworm | + 2026-06-22 11:46:55.644415 | debian-bookworm | +# ipc system call 2026-06-22 11:46:55.644526 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-22 11:46:55.644647 | debian-bookworm | + 2026-06-22 11:46:55.644765 | debian-bookworm | +## msgctl 2026-06-22 11:46:55.644882 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-22 11:46:55.644992 | debian-bookworm | +## msgget 2026-06-22 11:46:55.645106 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-22 11:46:55.645220 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:55.645335 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-22 11:46:55.645451 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-22 11:46:55.645560 | debian-bookworm | + 2026-06-22 11:46:55.645684 | debian-bookworm | +## semctl 2026-06-22 11:46:55.645800 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-22 11:46:55.645911 | debian-bookworm | +## semget 2026-06-22 11:46:55.646023 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-22 11:46:55.646133 | debian-bookworm | +## semop 2026-06-22 11:46:55.646245 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-22 11:46:55.646356 | debian-bookworm | +## semtimedop 2026-06-22 11:46:55.646492 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-22 11:46:55.646632 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:55.646763 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-22 11:46:55.646878 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-22 11:46:55.646993 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-22 11:46:55.647109 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-22 11:46:55.647250 | debian-bookworm | + 2026-06-22 11:46:55.647366 | debian-bookworm | +## shmctl 2026-06-22 11:46:55.647482 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-22 11:46:55.647594 | debian-bookworm | +## shmget 2026-06-22 11:46:55.647725 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-22 11:46:55.647840 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:55.647955 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-22 11:46:55.648070 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-22 11:46:55.648180 | debian-bookworm | + 2026-06-22 11:46:55.648293 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-22 11:46:55.648402 | debian-bookworm | + 2026-06-22 11:46:55.648516 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-22 11:46:55.648637 | debian-bookworm | + 2026-06-22 11:46:55.648750 | debian-bookworm | +## Common Shells 2026-06-22 11:46:55.648862 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-22 11:46:55.648976 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-22 11:46:55.649091 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-22 11:46:55.649203 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-22 11:46:55.649316 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-22 11:46:55.649427 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-22 11:46:55.649539 | debian-bookworm | + 2026-06-22 11:46:55.649675 | debian-bookworm | +## Root command executions 2026-06-22 11:46:55.649793 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-22 11:46:55.649902 | debian-bookworm | + 2026-06-22 11:46:55.650017 | debian-bookworm | +## File Deletion Events by User 2026-06-22 11:46:55.650135 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-22 11:46:55.650245 | debian-bookworm | + 2026-06-22 11:46:55.650356 | debian-bookworm | +## File Access 2026-06-22 11:46:55.650488 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-22 11:46:55.650641 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-22 11:46:55.650770 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-22 11:46:55.650880 | debian-bookworm | + 2026-06-22 11:46:55.650995 | debian-bookworm | +### Unsuccessful Creation 2026-06-22 11:46:55.651110 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-22 11:46:55.651225 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-22 11:46:55.651335 | debian-bookworm | + 2026-06-22 11:46:55.651447 | debian-bookworm | +### Unsuccessful Modification 2026-06-22 11:46:55.651565 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-22 11:46:55.651697 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-22 11:46:55.651806 | debian-bookworm | + 2026-06-22 11:46:55.651919 | debian-bookworm | +## 32bit API Exploitation 2026-06-22 11:46:55.652034 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-22 11:46:55.652149 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-22 11:46:55.652261 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-22 11:46:55.652372 | debian-bookworm | +### bit API. 2026-06-22 11:46:55.652487 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-22 11:46:55.652593 | debian-bookworm | + 2026-06-22 11:46:55.652744 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-22 11:46:55.652867 | debian-bookworm | + 2026-06-22 11:46:55.652975 | debian-bookworm | +##-e 2 2026-06-22 11:46:55.653078 | debian-bookworm | 2026-06-22 11:46:55.653369 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782128814.7909737-2638-18652327444809/.source.rules", "state": "file", "uid": 0} 2026-06-22 11:46:55.653488 | debian-bookworm | 2026-06-22 11:46:55.653617 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-22 11:46:56.505719 | ubuntu-noble | --- before 2026-06-22 11:46:56.505883 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-2055aixflqdw/tmprdq9qj9l/auditd.conf.j2 2026-06-22 11:46:56.505988 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-22 11:46:56.506082 | ubuntu-noble | +# 2026-06-22 11:46:56.506185 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-22 11:46:56.506298 | ubuntu-noble | +# 2026-06-22 11:46:56.506435 | ubuntu-noble | + 2026-06-22 11:46:56.506542 | ubuntu-noble | +local_events = yes 2026-06-22 11:46:56.506689 | ubuntu-noble | +write_logs = yes 2026-06-22 11:46:56.506940 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-22 11:46:56.507051 | ubuntu-noble | +log_group = adm 2026-06-22 11:46:56.507195 | ubuntu-noble | +log_format = RAW 2026-06-22 11:46:56.507345 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-22 11:46:56.507489 | ubuntu-noble | +freq = 50 2026-06-22 11:46:56.507625 | ubuntu-noble | +max_log_file = 8 2026-06-22 11:46:56.507715 | ubuntu-noble | +num_logs = 5 2026-06-22 11:46:56.507857 | ubuntu-noble | +priority_boost = 4 2026-06-22 11:46:56.507948 | ubuntu-noble | +disp_qos = lossy 2026-06-22 11:46:56.508047 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-22 11:46:56.508147 | ubuntu-noble | +name_format = NONE 2026-06-22 11:46:56.508255 | ubuntu-noble | +##name = mydomain 2026-06-22 11:46:56.508355 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-22 11:46:56.508450 | ubuntu-noble | +space_left = 12361 2026-06-22 11:46:56.508545 | ubuntu-noble | +space_left_action = email 2026-06-22 11:46:56.508641 | ubuntu-noble | +verify_email = yes 2026-06-22 11:46:56.508738 | ubuntu-noble | +action_mail_acct = root 2026-06-22 11:46:56.509382 | ubuntu-noble | +admin_space_left = 50 2026-06-22 11:46:56.509403 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-22 11:46:56.509409 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-22 11:46:56.509413 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-22 11:46:56.509418 | ubuntu-noble | +use_libwrap = yes 2026-06-22 11:46:56.509425 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-22 11:46:56.510441 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-22 11:46:56.510462 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-22 11:46:56.510467 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-22 11:46:56.510471 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-22 11:46:56.510476 | ubuntu-noble | +enable_krb5 = no 2026-06-22 11:46:56.510480 | ubuntu-noble | +krb5_principal = auditd 2026-06-22 11:46:56.510484 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-22 11:46:56.510489 | ubuntu-noble | +distribute_network = no 2026-06-22 11:46:56.510494 | ubuntu-noble | 2026-06-22 11:46:56.510579 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782128815.1995668-2452-268373259824147/.source.conf", "state": "file", "uid": 0} 2026-06-22 11:46:56.510687 | ubuntu-noble | 2026-06-22 11:46:56.510885 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-22 11:46:56.347078 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ActiveEnterTimestampMonotonic": "626555783", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:46:49 UTC", "AssertTimestampMonotonic": "626496192", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40127000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ConditionTimestampMonotonic": "626496134", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2410", "ExecMainStartTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ExecMainStartTimestampMonotonic": "626530859", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2409 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2409 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2413 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2413 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-22 11:46:49 UTC", "InactiveExitTimestampMonotonic": "626517664", "InvocationID": "f6c84f3e3ac74d868cf2f04e0d43d2a9", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2410", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-22 11:46:49 UTC", "StateChangeTimestampMonotonic": "626555783", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:46:56.352326 | debian-bookworm | 2026-06-22 11:46:56.352356 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-22 11:46:56.966594 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-22 11:46:56.966964 | ubuntu-noble | 2026-06-22 11:46:56.967199 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-22 11:46:56.724459 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007829", "end": "2026-06-22 11:46:56.677059", "msg": "", "rc": 0, "start": "2026-06-22 11:46:56.669230", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2026-06-22 11:46:56.724516 | debian-bookworm | 2026-06-22 11:46:56.724523 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-22 11:46:57.066492 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-22 11:46:57.066619 | debian-bookworm | --- before 2026-06-22 11:46:57.066637 | debian-bookworm | +++ after 2026-06-22 11:46:57.066649 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-22 11:46:57.066662 | debian-bookworm | { 2026-06-22 11:46:57.066674 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-22 11:46:57.066688 | debian-bookworm | - "state": "file" 2026-06-22 11:46:57.066701 | debian-bookworm | + "state": "absent" 2026-06-22 11:46:57.066712 | debian-bookworm | } 2026-06-22 11:46:57.066723 | debian-bookworm | 2026-06-22 11:46:57.066735 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-22 11:46:57.066993 | debian-bookworm | 2026-06-22 11:46:57.067347 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-22 11:46:57.884407 | ubuntu-noble | --- before 2026-06-22 11:46:57.884597 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-2055aixflqdw/tmp_2t8krwh/20-neo23x0.rules.j2 2026-06-22 11:46:57.884721 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-22 11:46:57.884910 | ubuntu-noble | +# ___ ___ __ __ 2026-06-22 11:46:57.885037 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-22 11:46:57.885149 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-22 11:46:57.885258 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-22 11:46:57.885378 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-22 11:46:57.885491 | ubuntu-noble | +# 2026-06-22 11:46:57.885611 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-22 11:46:57.885724 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-22 11:46:57.885869 | ubuntu-noble | +# 2026-06-22 11:46:57.885993 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-22 11:46:57.886105 | ubuntu-noble | +# 2026-06-22 11:46:57.886219 | ubuntu-noble | +# Created : 2017/12/05 2026-06-22 11:46:57.886332 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-22 11:46:57.886441 | ubuntu-noble | +# 2026-06-22 11:46:57.886554 | ubuntu-noble | +# Based on rules published here: 2026-06-22 11:46:57.886669 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-22 11:46:57.887192 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-22 11:46:57.887412 | ubuntu-noble | +# CentOS 7 hardening 2026-06-22 11:46:57.887597 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-22 11:46:57.887757 | ubuntu-noble | +# Linux audit repo 2026-06-22 11:46:57.888000 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-22 11:46:57.888172 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-22 11:46:57.888339 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-22 11:46:57.888450 | ubuntu-noble | +# 2026-06-22 11:46:57.888564 | ubuntu-noble | +# Further rules 2026-06-22 11:46:57.888721 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-22 11:46:57.888962 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-22 11:46:57.889130 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-22 11:46:57.889297 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-22 11:46:57.889410 | ubuntu-noble | + 2026-06-22 11:46:57.889525 | ubuntu-noble | +# Remove any existing rules 2026-06-22 11:46:57.889637 | ubuntu-noble | +-D 2026-06-22 11:46:57.889748 | ubuntu-noble | + 2026-06-22 11:46:57.889894 | ubuntu-noble | +# Buffer Size 2026-06-22 11:46:57.890016 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-22 11:46:57.890125 | ubuntu-noble | +-b 8192 2026-06-22 11:46:57.890236 | ubuntu-noble | + 2026-06-22 11:46:57.890350 | ubuntu-noble | +# Failure Mode 2026-06-22 11:46:57.890470 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-22 11:46:57.890580 | ubuntu-noble | +-f 1 2026-06-22 11:46:57.890686 | ubuntu-noble | + 2026-06-22 11:46:57.892826 | ubuntu-noble | +# Ignore errors 2026-06-22 11:46:57.892847 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-22 11:46:57.892852 | ubuntu-noble | +-i 2026-06-22 11:46:57.892856 | ubuntu-noble | + 2026-06-22 11:46:57.892860 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-22 11:46:57.892863 | ubuntu-noble | + 2026-06-22 11:46:57.892867 | ubuntu-noble | +## Audit the audit logs 2026-06-22 11:46:57.892871 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-22 11:46:57.892875 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-22 11:46:57.892878 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-22 11:46:57.892882 | ubuntu-noble | + 2026-06-22 11:46:57.892885 | ubuntu-noble | +## Auditd configuration 2026-06-22 11:46:57.892889 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-22 11:46:57.892892 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-22 11:46:57.892896 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-22 11:46:57.892899 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-22 11:46:57.892902 | ubuntu-noble | + 2026-06-22 11:46:57.892906 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-22 11:46:57.892909 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-22 11:46:57.892913 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-22 11:46:57.892930 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-22 11:46:57.892951 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-22 11:46:57.893065 | ubuntu-noble | + 2026-06-22 11:46:57.893179 | ubuntu-noble | +## Access to all audit trails 2026-06-22 11:46:57.893287 | ubuntu-noble | + 2026-06-22 11:46:57.893407 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-22 11:46:57.893522 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-22 11:46:57.893647 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-22 11:46:57.893763 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-22 11:46:57.893936 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-22 11:46:57.894052 | ubuntu-noble | + 2026-06-22 11:46:57.894163 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-22 11:46:57.894268 | ubuntu-noble | + 2026-06-22 11:46:57.894384 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-22 11:46:57.894489 | ubuntu-noble | + 2026-06-22 11:46:57.894601 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-22 11:46:57.894713 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-22 11:46:57.894849 | ubuntu-noble | + 2026-06-22 11:46:57.894970 | ubuntu-noble | +## Ignore current working directory records 2026-06-22 11:46:57.895088 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-22 11:46:57.895194 | ubuntu-noble | + 2026-06-22 11:46:57.895312 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-22 11:46:57.895424 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-22 11:46:57.895536 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-22 11:46:57.895641 | ubuntu-noble | + 2026-06-22 11:46:57.895753 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-22 11:46:57.895908 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-22 11:46:57.896019 | ubuntu-noble | + 2026-06-22 11:46:57.896134 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-22 11:46:57.896251 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-22 11:46:57.896358 | ubuntu-noble | + 2026-06-22 11:46:57.896471 | ubuntu-noble | +## Open VM Tools 2026-06-22 11:46:57.896587 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-22 11:46:57.896692 | ubuntu-noble | + 2026-06-22 11:46:57.896855 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-22 11:46:57.896994 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-22 11:46:57.897109 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-22 11:46:57.897214 | ubuntu-noble | + 2026-06-22 11:46:57.897323 | ubuntu-noble | +## FileBeat 2026-06-22 11:46:57.897440 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-22 11:46:57.897546 | ubuntu-noble | + 2026-06-22 11:46:57.897658 | ubuntu-noble | +## More information on how to filter events 2026-06-22 11:46:57.897771 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-22 11:46:57.897907 | ubuntu-noble | + 2026-06-22 11:46:57.898023 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-22 11:46:57.898128 | ubuntu-noble | + 2026-06-22 11:46:57.898241 | ubuntu-noble | +## Kernel parameters 2026-06-22 11:46:57.898354 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-22 11:46:57.898466 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-22 11:46:57.898573 | ubuntu-noble | + 2026-06-22 11:46:57.898686 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-22 11:46:57.898827 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-22 11:46:57.898961 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-22 11:46:57.899078 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-22 11:46:57.899196 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-22 11:46:57.899301 | ubuntu-noble | + 2026-06-22 11:46:57.899412 | ubuntu-noble | +## Modprobe configuration 2026-06-22 11:46:57.899525 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-22 11:46:57.899635 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-22 11:46:57.899740 | ubuntu-noble | + 2026-06-22 11:46:57.899900 | ubuntu-noble | +## KExec usage (all actions) 2026-06-22 11:46:57.900023 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-22 11:46:57.900145 | ubuntu-noble | + 2026-06-22 11:46:57.900259 | ubuntu-noble | +## Special files 2026-06-22 11:46:57.900376 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-22 11:46:57.900482 | ubuntu-noble | + 2026-06-22 11:46:57.900595 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-22 11:46:57.900710 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-22 11:46:57.900843 | ubuntu-noble | + 2026-06-22 11:46:57.900966 | ubuntu-noble | +### NFS mount 2026-06-22 11:46:57.901089 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.901218 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.901328 | ubuntu-noble | + 2026-06-22 11:46:57.901443 | ubuntu-noble | +## Change swap (only attributable) 2026-06-22 11:46:57.901559 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-22 11:46:57.901666 | ubuntu-noble | + 2026-06-22 11:46:57.901775 | ubuntu-noble | +## Time 2026-06-22 11:46:57.901924 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-22 11:46:57.902046 | ubuntu-noble | +### Local time zone 2026-06-22 11:46:57.902159 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-22 11:46:57.902266 | ubuntu-noble | + 2026-06-22 11:46:57.902375 | ubuntu-noble | +## Stunnel 2026-06-22 11:46:57.902486 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-22 11:46:57.902598 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-22 11:46:57.902704 | ubuntu-noble | + 2026-06-22 11:46:57.902840 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-22 11:46:57.902957 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-22 11:46:57.903067 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-22 11:46:57.903177 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-22 11:46:57.903292 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-22 11:46:57.903403 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-22 11:46:57.903514 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-22 11:46:57.903627 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-22 11:46:57.903738 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-22 11:46:57.903897 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-22 11:46:57.904014 | ubuntu-noble | + 2026-06-22 11:46:57.904129 | ubuntu-noble | +## User, group, password databases 2026-06-22 11:46:57.904240 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-22 11:46:57.904350 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-22 11:46:57.904463 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-22 11:46:57.904573 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-22 11:46:57.904685 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-22 11:46:57.904791 | ubuntu-noble | + 2026-06-22 11:46:57.904935 | ubuntu-noble | +## Sudoers file changes 2026-06-22 11:46:57.905050 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-22 11:46:57.905161 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-22 11:46:57.905266 | ubuntu-noble | + 2026-06-22 11:46:57.905374 | ubuntu-noble | +## Passwd 2026-06-22 11:46:57.905487 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-22 11:46:57.905590 | ubuntu-noble | + 2026-06-22 11:46:57.905703 | ubuntu-noble | +## Tools to change group identifiers 2026-06-22 11:46:57.905861 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-22 11:46:57.905986 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-22 11:46:57.906101 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-22 11:46:57.906217 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-22 11:46:57.906331 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-22 11:46:57.906443 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-22 11:46:57.906559 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-22 11:46:57.906666 | ubuntu-noble | + 2026-06-22 11:46:57.906778 | ubuntu-noble | +## Login configuration and information 2026-06-22 11:46:57.906928 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-22 11:46:57.907048 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-22 11:46:57.907158 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-22 11:46:57.907269 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-22 11:46:57.907379 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-22 11:46:57.907487 | ubuntu-noble | + 2026-06-22 11:46:57.907599 | ubuntu-noble | +## Network Environment 2026-06-22 11:46:57.907708 | ubuntu-noble | +### Changes to hostname 2026-06-22 11:46:57.907901 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-22 11:46:57.908854 | ubuntu-noble | + 2026-06-22 11:46:57.908866 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-22 11:46:57.908870 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-22 11:46:57.908874 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-22 11:46:57.908877 | ubuntu-noble | + 2026-06-22 11:46:57.908881 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-22 11:46:57.908885 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-22 11:46:57.908888 | ubuntu-noble | + 2026-06-22 11:46:57.908892 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-22 11:46:57.908963 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-22 11:46:57.909070 | ubuntu-noble | + 2026-06-22 11:46:57.909183 | ubuntu-noble | +### Changes to other files 2026-06-22 11:46:57.909299 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-22 11:46:57.909414 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-22 11:46:57.909527 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-22 11:46:57.909637 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-22 11:46:57.909760 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-22 11:46:57.909894 | ubuntu-noble | + 2026-06-22 11:46:57.910010 | ubuntu-noble | +### Changes to issue 2026-06-22 11:46:57.910123 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-22 11:46:57.910235 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-22 11:46:57.910339 | ubuntu-noble | + 2026-06-22 11:46:57.910452 | ubuntu-noble | +## System startup scripts 2026-06-22 11:46:57.910564 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-22 11:46:57.910673 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-22 11:46:57.910785 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-22 11:46:57.910918 | ubuntu-noble | + 2026-06-22 11:46:57.911033 | ubuntu-noble | +## Library search paths 2026-06-22 11:46:57.911146 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-22 11:46:57.911257 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-22 11:46:57.911363 | ubuntu-noble | + 2026-06-22 11:46:57.911480 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-22 11:46:57.911593 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-22 11:46:57.911697 | ubuntu-noble | + 2026-06-22 11:46:57.911851 | ubuntu-noble | +## Pam configuration 2026-06-22 11:46:57.911972 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-22 11:46:57.912086 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-22 11:46:57.912197 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-22 11:46:57.912311 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-22 11:46:57.912422 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-22 11:46:57.912532 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-22 11:46:57.912643 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-22 11:46:57.912752 | ubuntu-noble | + 2026-06-22 11:46:57.912894 | ubuntu-noble | +## Mail configuration 2026-06-22 11:46:57.913010 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-22 11:46:57.913122 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-22 11:46:57.913232 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-22 11:46:57.913339 | ubuntu-noble | + 2026-06-22 11:46:57.913448 | ubuntu-noble | +## SSH configuration 2026-06-22 11:46:57.913561 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-22 11:46:57.913671 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-22 11:46:57.913776 | ubuntu-noble | + 2026-06-22 11:46:57.913914 | ubuntu-noble | +## root ssh key tampering 2026-06-22 11:46:57.914029 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-22 11:46:57.914134 | ubuntu-noble | + 2026-06-22 11:46:57.914244 | ubuntu-noble | +# Systemd 2026-06-22 11:46:57.914355 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-22 11:46:57.914466 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-22 11:46:57.914577 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-22 11:46:57.914683 | ubuntu-noble | + 2026-06-22 11:46:57.914837 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-22 11:46:57.914964 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:57.915079 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:57.915833 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-22 11:46:57.915852 | ubuntu-noble | + 2026-06-22 11:46:57.915857 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-22 11:46:57.915860 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-22 11:46:57.915864 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-22 11:46:57.915868 | ubuntu-noble | + 2026-06-22 11:46:57.915871 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-22 11:46:57.915941 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-22 11:46:57.916050 | ubuntu-noble | + 2026-06-22 11:46:57.916165 | ubuntu-noble | +## Critical elements access failures 2026-06-22 11:46:57.916283 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.916399 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.916513 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.916629 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.916742 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.916894 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.917018 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.917270 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-22 11:46:57.917384 | ubuntu-noble | + 2026-06-22 11:46:57.917503 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-22 11:46:57.917618 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-22 11:46:57.917732 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-22 11:46:57.917870 | ubuntu-noble | + 2026-06-22 11:46:57.917991 | ubuntu-noble | +## Power state 2026-06-22 11:46:57.918206 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-22 11:46:57.918321 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-22 11:46:57.918432 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-22 11:46:57.918545 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-22 11:46:57.918651 | ubuntu-noble | + 2026-06-22 11:46:57.918763 | ubuntu-noble | +## Session initiation information 2026-06-22 11:46:57.918943 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-22 11:46:57.919063 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-22 11:46:57.919176 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-22 11:46:57.919283 | ubuntu-noble | + 2026-06-22 11:46:57.919397 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-22 11:46:57.919516 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.919634 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.919749 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.919894 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920016 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920134 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920250 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920374 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920492 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920607 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.920722 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.921451 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.921464 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-22 11:46:57.921468 | ubuntu-noble | + 2026-06-22 11:46:57.921472 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-22 11:46:57.921476 | ubuntu-noble | + 2026-06-22 11:46:57.921488 | ubuntu-noble | +## Reconnaissance 2026-06-22 11:46:57.921769 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-22 11:46:57.922000 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-22 11:46:57.922282 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-22 11:46:57.922408 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-22 11:46:57.922530 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-22 11:46:57.922643 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-22 11:46:57.922749 | ubuntu-noble | + 2026-06-22 11:46:57.922897 | ubuntu-noble | +## Suspicious activity 2026-06-22 11:46:57.923018 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-22 11:46:57.923130 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-22 11:46:57.923243 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-22 11:46:57.923354 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-22 11:46:57.923651 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-22 11:46:57.923948 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-22 11:46:57.924081 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-22 11:46:57.924202 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-22 11:46:57.924314 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-22 11:46:57.924433 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-22 11:46:57.924544 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-22 11:46:57.924738 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-22 11:46:57.924891 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-22 11:46:57.925011 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-22 11:46:57.925312 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-22 11:46:57.925467 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-22 11:46:57.925898 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-22 11:46:57.926036 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-22 11:46:57.926151 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-22 11:46:57.926264 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-22 11:46:57.926378 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-22 11:46:57.927845 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-22 11:46:57.927871 | ubuntu-noble | + 2026-06-22 11:46:57.927875 | ubuntu-noble | +## sssd 2026-06-22 11:46:57.927880 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.927884 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.927888 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.927892 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.927895 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.927899 | ubuntu-noble | + 2026-06-22 11:46:57.927903 | ubuntu-noble | +## T1002 Data Compressed 2026-06-22 11:46:57.927906 | ubuntu-noble | + 2026-06-22 11:46:57.927910 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-22 11:46:57.927920 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-22 11:46:57.927923 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-22 11:46:57.928020 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-22 11:46:57.928131 | ubuntu-noble | + 2026-06-22 11:46:57.928245 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-22 11:46:57.928359 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-22 11:46:57.928465 | ubuntu-noble | + 2026-06-22 11:46:57.928580 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-22 11:46:57.928694 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-22 11:46:57.928831 | ubuntu-noble | + 2026-06-22 11:46:57.928957 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-22 11:46:57.929071 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-22 11:46:57.929179 | ubuntu-noble | + 2026-06-22 11:46:57.929293 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-22 11:46:57.929407 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-22 11:46:57.929512 | ubuntu-noble | + 2026-06-22 11:46:57.929626 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-22 11:46:57.929749 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-22 11:46:57.929913 | ubuntu-noble | + 2026-06-22 11:46:57.930035 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-22 11:46:57.930156 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-22 11:46:57.930263 | ubuntu-noble | + 2026-06-22 11:46:57.930378 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-22 11:46:57.930490 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-22 11:46:57.930596 | ubuntu-noble | + 2026-06-22 11:46:57.930717 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-22 11:46:57.930882 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-22 11:46:57.931005 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-22 11:46:57.931121 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-22 11:46:57.931225 | ubuntu-noble | + 2026-06-22 11:46:57.931339 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-22 11:46:57.931451 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-22 11:46:57.931556 | ubuntu-noble | + 2026-06-22 11:46:57.931669 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-22 11:46:57.931784 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-22 11:46:57.931940 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-22 11:46:57.932051 | ubuntu-noble | + 2026-06-22 11:46:57.932164 | ubuntu-noble | +## Sbin suspicious activity 2026-06-22 11:46:57.932278 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-22 11:46:57.932389 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-22 11:46:57.932501 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-22 11:46:57.932613 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-22 11:46:57.932725 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-22 11:46:57.932863 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-22 11:46:57.932981 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-22 11:46:57.933093 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-22 11:46:57.933205 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-22 11:46:57.933315 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-22 11:46:57.933420 | ubuntu-noble | + 2026-06-22 11:46:57.933529 | ubuntu-noble | +### kde4 2026-06-22 11:46:57.933650 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.933769 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-22 11:46:57.933924 | ubuntu-noble | + 2026-06-22 11:46:57.934041 | ubuntu-noble | +## dbus-send invocation 2026-06-22 11:46:57.934160 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-22 11:46:57.934273 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-22 11:46:57.934386 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-22 11:46:57.934493 | ubuntu-noble | + 2026-06-22 11:46:57.934602 | ubuntu-noble | +## pkexec invocation 2026-06-22 11:46:57.934715 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-22 11:46:57.934857 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-22 11:46:57.934973 | ubuntu-noble | + 2026-06-22 11:46:57.935091 | ubuntu-noble | +## Suspicious shells 2026-06-22 11:46:57.935202 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-22 11:46:57.935314 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-22 11:46:57.935426 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-22 11:46:57.935540 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-22 11:46:57.935651 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-22 11:46:57.935761 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-22 11:46:57.935945 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-22 11:46:57.936068 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-22 11:46:57.936182 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-22 11:46:57.936289 | ubuntu-noble | + 2026-06-22 11:46:57.936399 | ubuntu-noble | +# Web Server Actvity 2026-06-22 11:46:57.936518 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-22 11:46:57.936633 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-22 11:46:57.936741 | ubuntu-noble | + 2026-06-22 11:46:57.936893 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-22 11:46:57.937012 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-22 11:46:57.937123 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-22 11:46:57.937243 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-22 11:46:57.937358 | ubuntu-noble | + 2026-06-22 11:46:57.937471 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-22 11:46:57.937582 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-22 11:46:57.937694 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-22 11:46:57.937829 | ubuntu-noble | + 2026-06-22 11:46:57.937953 | ubuntu-noble | +## Shell/profile configurations 2026-06-22 11:46:57.938067 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-22 11:46:57.938179 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-22 11:46:57.939842 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-22 11:46:57.939862 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-22 11:46:57.939866 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-22 11:46:57.939870 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-22 11:46:57.939873 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-22 11:46:57.939876 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-22 11:46:57.939880 | ubuntu-noble | + 2026-06-22 11:46:57.939884 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-22 11:46:57.939887 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-22 11:46:57.939891 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-22 11:46:57.939894 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-22 11:46:57.939898 | ubuntu-noble | + 2026-06-22 11:46:57.939901 | ubuntu-noble | +## Injection 2026-06-22 11:46:57.939905 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-22 11:46:57.939908 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-22 11:46:57.940003 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-22 11:46:57.940120 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-22 11:46:57.940238 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-22 11:46:57.940363 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-22 11:46:57.940469 | ubuntu-noble | + 2026-06-22 11:46:57.940579 | ubuntu-noble | +## Anonymous File Creation 2026-06-22 11:46:57.940692 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-22 11:46:57.940852 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-22 11:46:57.940985 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-22 11:46:57.941103 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-22 11:46:57.941210 | ubuntu-noble | + 2026-06-22 11:46:57.941323 | ubuntu-noble | +## Privilege Abuse 2026-06-22 11:46:57.941438 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-22 11:46:57.941555 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-22 11:46:57.941661 | ubuntu-noble | + 2026-06-22 11:46:57.941773 | ubuntu-noble | +# Socket Creations 2026-06-22 11:46:57.941926 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-22 11:46:57.942041 | ubuntu-noble | + 2026-06-22 11:46:57.942157 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-22 11:46:57.942273 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-22 11:46:57.942379 | ubuntu-noble | + 2026-06-22 11:46:57.942496 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-22 11:46:57.942610 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-22 11:46:57.942716 | ubuntu-noble | + 2026-06-22 11:46:57.942859 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-22 11:46:57.942973 | ubuntu-noble | + 2026-06-22 11:46:57.943087 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-22 11:46:57.943200 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-22 11:46:57.943315 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-22 11:46:57.943422 | ubuntu-noble | + 2026-06-22 11:46:57.943537 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-22 11:46:57.943652 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-22 11:46:57.943757 | ubuntu-noble | + 2026-06-22 11:46:57.943900 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-22 11:46:57.944019 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-22 11:46:57.944132 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-22 11:46:57.944243 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-22 11:46:57.944366 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-22 11:46:57.944471 | ubuntu-noble | + 2026-06-22 11:46:57.944582 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-22 11:46:57.944695 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-22 11:46:57.944865 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-22 11:46:57.944994 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-22 11:46:57.945108 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-22 11:46:57.945222 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-22 11:46:57.945336 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-22 11:46:57.945449 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-22 11:46:57.945556 | ubuntu-noble | + 2026-06-22 11:46:57.945670 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-22 11:46:57.945785 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-22 11:46:57.945992 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-22 11:46:57.946115 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-22 11:46:57.946234 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-22 11:46:57.946352 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-22 11:46:57.946466 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-22 11:46:57.946573 | ubuntu-noble | + 2026-06-22 11:46:57.946687 | ubuntu-noble | +# npm 2026-06-22 11:46:57.946836 | ubuntu-noble | +## T1072 third party software 2026-06-22 11:46:57.946958 | ubuntu-noble | +## https://www.npmjs.com 2026-06-22 11:46:57.947072 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-22 11:46:57.947192 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-22 11:46:57.947301 | ubuntu-noble | + 2026-06-22 11:46:57.947421 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-22 11:46:57.947534 | ubuntu-noble | +## T1072 third party software 2026-06-22 11:46:57.947647 | ubuntu-noble | +## https://www.cpan.org 2026-06-22 11:46:57.947763 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-22 11:46:57.947902 | ubuntu-noble | + 2026-06-22 11:46:57.948020 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-22 11:46:57.948134 | ubuntu-noble | +## T1072 third party software 2026-06-22 11:46:57.948247 | ubuntu-noble | +## https://rubygems.org 2026-06-22 11:46:57.948373 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-22 11:46:57.948482 | ubuntu-noble | + 2026-06-22 11:46:57.948594 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-22 11:46:57.948705 | ubuntu-noble | +## T1072 third party software 2026-06-22 11:46:57.948860 | ubuntu-noble | +## https://luarocks.org 2026-06-22 11:46:57.948991 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-22 11:46:57.949097 | ubuntu-noble | + 2026-06-22 11:46:57.949208 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-22 11:46:57.949321 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-22 11:46:57.949431 | ubuntu-noble | +## T1072 third party software 2026-06-22 11:46:57.949545 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-22 11:46:57.949659 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-22 11:46:57.949765 | ubuntu-noble | + 2026-06-22 11:46:57.949906 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-22 11:46:57.950019 | ubuntu-noble | + 2026-06-22 11:46:57.950130 | ubuntu-noble | +## GDS specific secrets 2026-06-22 11:46:57.950242 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-22 11:46:57.950349 | ubuntu-noble | + 2026-06-22 11:46:57.950460 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-22 11:46:57.950581 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-22 11:46:57.950694 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-22 11:46:57.950831 | ubuntu-noble | + 2026-06-22 11:46:57.950954 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-22 11:46:57.951068 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-22 11:46:57.951175 | ubuntu-noble | + 2026-06-22 11:46:57.951284 | ubuntu-noble | +## Salt 2026-06-22 11:46:57.951398 | ubuntu-noble | +## https://saltproject.io/ 2026-06-22 11:46:57.951514 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-22 11:46:57.951626 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-22 11:46:57.951737 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-22 11:46:57.951891 | ubuntu-noble | + 2026-06-22 11:46:57.953849 | ubuntu-noble | +## Otter 2026-06-22 11:46:57.953865 | ubuntu-noble | +## https://inedo.com/otter 2026-06-22 11:46:57.953880 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-22 11:46:57.953884 | ubuntu-noble | + 2026-06-22 11:46:57.953887 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-22 11:46:57.953891 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-22 11:46:57.953895 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-22 11:46:57.953898 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-22 11:46:57.953902 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.953905 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-22 11:46:57.953909 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-22 11:46:57.953912 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-22 11:46:57.953916 | ubuntu-noble | + 2026-06-22 11:46:57.953919 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-22 11:46:57.953923 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-22 11:46:57.953926 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.953930 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-22 11:46:57.953933 | ubuntu-noble | + 2026-06-22 11:46:57.953937 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-22 11:46:57.953940 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-22 11:46:57.954028 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.954144 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-22 11:46:57.954251 | ubuntu-noble | + 2026-06-22 11:46:57.954366 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-22 11:46:57.954470 | ubuntu-noble | + 2026-06-22 11:46:57.954583 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-22 11:46:57.954693 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.954840 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-22 11:46:57.954955 | ubuntu-noble | + 2026-06-22 11:46:57.955068 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-22 11:46:57.955180 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-22 11:46:57.955290 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.955402 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-22 11:46:57.955507 | ubuntu-noble | + 2026-06-22 11:46:57.955618 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-22 11:46:57.955732 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-22 11:46:57.955871 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.955991 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-22 11:46:57.956097 | ubuntu-noble | + 2026-06-22 11:46:57.956216 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-22 11:46:57.956330 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-22 11:46:57.956440 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.956563 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-22 11:46:57.956670 | ubuntu-noble | + 2026-06-22 11:46:57.956784 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-22 11:46:57.956957 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-22 11:46:57.957074 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.957190 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-22 11:46:57.957296 | ubuntu-noble | + 2026-06-22 11:46:57.957409 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-22 11:46:57.957522 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-22 11:46:57.957629 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.957741 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-22 11:46:57.957876 | ubuntu-noble | + 2026-06-22 11:46:57.958004 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-22 11:46:57.958117 | ubuntu-noble | +### https://beyondgrep.com 2026-06-22 11:46:57.958230 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-22 11:46:57.958346 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-22 11:46:57.958458 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-22 11:46:57.958566 | ubuntu-noble | +### macOS 2026-06-22 11:46:57.958679 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-22 11:46:57.958785 | ubuntu-noble | + 2026-06-22 11:46:57.958921 | ubuntu-noble | +## Docker 2026-06-22 11:46:57.959056 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-22 11:46:57.959171 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-22 11:46:57.959283 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-22 11:46:57.959394 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-22 11:46:57.959503 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-22 11:46:57.959626 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-22 11:46:57.959740 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-22 11:46:57.959906 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-22 11:46:57.960031 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-22 11:46:57.960157 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-22 11:46:57.960264 | ubuntu-noble | + 2026-06-22 11:46:57.960375 | ubuntu-noble | +## Virtualization stuff 2026-06-22 11:46:57.960488 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-22 11:46:57.960600 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-22 11:46:57.960713 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-22 11:46:57.960856 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-22 11:46:57.960974 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-22 11:46:57.961087 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-22 11:46:57.961199 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-22 11:46:57.961306 | ubuntu-noble | + 2026-06-22 11:46:57.961418 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-22 11:46:57.961523 | ubuntu-noble | + 2026-06-22 11:46:57.771367 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ActiveEnterTimestampMonotonic": "626555783", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:46:49 UTC", "AssertTimestampMonotonic": "626496192", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "41384000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ConditionTimestampMonotonic": "626496134", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2410", "ExecMainStartTimestamp": "Mon 2026-06-22 11:46:49 UTC", "ExecMainStartTimestampMonotonic": "626530859", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2409 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2409 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2413 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:46:49 UTC] ; stop_time=[Mon 2026-06-22 11:46:49 UTC] ; pid=2413 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-22 11:46:49 UTC", "InactiveExitTimestampMonotonic": "626517664", "InvocationID": "f6c84f3e3ac74d868cf2f04e0d43d2a9", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2410", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-22 11:46:49 UTC", "StateChangeTimestampMonotonic": "626555783", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:46:57.961638 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-22 11:46:57.775042 | debian-bookworm | 2026-06-22 11:46:57.961752 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-22 11:46:57.775262 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-22 11:46:57.961895 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-22 11:46:57.962015 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-22 11:46:57.962129 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-22 11:46:57.962242 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-22 11:46:57.962356 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-22 11:46:57.962479 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-22 11:46:57.962593 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-22 11:46:57.962707 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-22 11:46:57.962852 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-22 11:46:57.962981 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-22 11:46:57.963102 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-22 11:46:57.963222 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-22 11:46:57.963338 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-22 11:46:57.963453 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-22 11:46:57.963567 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-22 11:46:57.963674 | ubuntu-noble | + 2026-06-22 11:46:57.963787 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-22 11:46:57.963945 | ubuntu-noble | + 2026-06-22 11:46:57.964070 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-22 11:46:57.964262 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-22 11:46:57.964379 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-22 11:46:57.964494 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-22 11:46:57.964606 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-22 11:46:57.964717 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-22 11:46:57.964860 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-22 11:46:57.964982 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-22 11:46:57.965089 | ubuntu-noble | + 2026-06-22 11:46:57.965201 | ubuntu-noble | +### qemu on macOS 2026-06-22 11:46:57.965307 | ubuntu-noble | + 2026-06-22 11:46:57.965421 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-22 11:46:57.965534 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-22 11:46:57.965648 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-22 11:46:57.965761 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-22 11:46:57.965903 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-22 11:46:57.966015 | ubuntu-noble | + 2026-06-22 11:46:57.966126 | ubuntu-noble | +## Kubelet 2026-06-22 11:46:57.966238 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-22 11:46:57.966344 | ubuntu-noble | + 2026-06-22 11:46:57.966453 | ubuntu-noble | +# ipc system call 2026-06-22 11:46:57.966563 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-22 11:46:57.966669 | ubuntu-noble | + 2026-06-22 11:46:57.966778 | ubuntu-noble | +## msgctl 2026-06-22 11:46:57.966943 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-22 11:46:57.967058 | ubuntu-noble | +## msgget 2026-06-22 11:46:57.967182 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-22 11:46:57.967312 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:57.967429 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-22 11:46:57.967544 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-22 11:46:57.967649 | ubuntu-noble | + 2026-06-22 11:46:57.967761 | ubuntu-noble | +## semctl 2026-06-22 11:46:57.967910 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-22 11:46:57.968024 | ubuntu-noble | +## semget 2026-06-22 11:46:57.968141 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-22 11:46:57.968252 | ubuntu-noble | +## semop 2026-06-22 11:46:57.968374 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-22 11:46:57.968830 | ubuntu-noble | +## semtimedop 2026-06-22 11:46:57.968840 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-22 11:46:57.968848 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:57.968852 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-22 11:46:57.968950 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-22 11:46:57.969065 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-22 11:46:57.969183 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-22 11:46:57.969290 | ubuntu-noble | + 2026-06-22 11:46:57.969399 | ubuntu-noble | +## shmctl 2026-06-22 11:46:57.969515 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-22 11:46:57.969625 | ubuntu-noble | +## shmget 2026-06-22 11:46:57.969740 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-22 11:46:57.969881 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-22 11:46:57.970002 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-22 11:46:57.970119 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-22 11:46:57.970231 | ubuntu-noble | + 2026-06-22 11:46:57.970348 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-22 11:46:57.970453 | ubuntu-noble | + 2026-06-22 11:46:57.970568 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-22 11:46:57.970673 | ubuntu-noble | + 2026-06-22 11:46:57.970784 | ubuntu-noble | +## Common Shells 2026-06-22 11:46:57.970948 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-22 11:46:57.971067 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-22 11:46:57.971183 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-22 11:46:57.971305 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-22 11:46:57.971419 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-22 11:46:57.971533 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-22 11:46:57.972851 | ubuntu-noble | + 2026-06-22 11:46:57.972866 | ubuntu-noble | +## Root command executions 2026-06-22 11:46:57.972870 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-22 11:46:57.972874 | ubuntu-noble | + 2026-06-22 11:46:57.972877 | ubuntu-noble | +## File Deletion Events by User 2026-06-22 11:46:57.972881 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-22 11:46:57.972885 | ubuntu-noble | + 2026-06-22 11:46:57.972888 | ubuntu-noble | +## File Access 2026-06-22 11:46:57.972892 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-22 11:46:57.972896 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-22 11:46:57.972901 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-22 11:46:57.972904 | ubuntu-noble | + 2026-06-22 11:46:57.972964 | ubuntu-noble | +### Unsuccessful Creation 2026-06-22 11:46:57.973087 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-22 11:46:57.973206 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-22 11:46:57.973313 | ubuntu-noble | + 2026-06-22 11:46:57.973425 | ubuntu-noble | +### Unsuccessful Modification 2026-06-22 11:46:57.973543 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-22 11:46:57.973674 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-22 11:46:57.973781 | ubuntu-noble | + 2026-06-22 11:46:57.973925 | ubuntu-noble | +## 32bit API Exploitation 2026-06-22 11:46:57.974046 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-22 11:46:57.974163 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-22 11:46:57.974276 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-22 11:46:57.974388 | ubuntu-noble | +### bit API. 2026-06-22 11:46:57.974505 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-22 11:46:57.974611 | ubuntu-noble | + 2026-06-22 11:46:57.974728 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-22 11:46:57.974880 | ubuntu-noble | + 2026-06-22 11:46:57.975000 | ubuntu-noble | +##-e 2 2026-06-22 11:46:57.975107 | ubuntu-noble | 2026-06-22 11:46:57.975355 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782128816.9934087-2530-255492659071715/.source.rules", "state": "file", "uid": 0} 2026-06-22 11:46:57.975464 | ubuntu-noble | 2026-06-22 11:46:57.975584 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-22 11:46:58.174223 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.081817", "end": "2026-06-22 11:46:58.109362", "msg": "", "rc": 0, "start": "2026-06-22 11:46:58.027545", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2800\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1363\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2800\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1366\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2800", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1363", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2800", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1366", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-22 11:46:58.174292 | debian-bookworm | 2026-06-22 11:46:58.174366 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-22 11:46:58.730439 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ActiveEnterTimestampMonotonic": "210259883", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-journald.socket systemd-tmpfiles-setup.service local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:46:50 UTC", "AssertTimestampMonotonic": "210174950", "Before": "shutdown.target ssh.service sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "51748000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ConditionTimestampMonotonic": "210174904", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2299", "ExecMainStartTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ExecMainStartTimestampMonotonic": "210218383", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2298 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2298 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2303 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2303 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-22 11:46:50 UTC", "InactiveExitTimestampMonotonic": "210183308", "InvocationID": "101be3dff6aa486c86d6df09220880dd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2299", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3549376512", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2129920", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-22 11:46:50 UTC", "StateChangeTimestampMonotonic": "210259883", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:46:58.739902 | ubuntu-noble | 2026-06-22 11:46:58.740642 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-22 11:46:58.944917 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:46:57 UTC", "ActiveEnterTimestampMonotonic": "634516604", "ActiveExitTimestamp": "Mon 2026-06-22 11:46:57 UTC", "ActiveExitTimestampMonotonic": "634331057", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:46:57 UTC", "AssertTimestampMonotonic": "634373851", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "171755000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:46:57 UTC", "ConditionTimestampMonotonic": "634373774", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2800", "ExecMainStartTimestamp": "Mon 2026-06-22 11:46:57 UTC", "ExecMainStartTimestampMonotonic": "634407804", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:46:57 UTC] ; stop_time=[Mon 2026-06-22 11:46:57 UTC] ; pid=2798 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:46:57 UTC] ; stop_time=[Mon 2026-06-22 11:46:57 UTC] ; pid=2798 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:46:57 UTC] ; stop_time=[Mon 2026-06-22 11:46:57 UTC] ; pid=2804 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:46:57 UTC] ; stop_time=[Mon 2026-06-22 11:46:57 UTC] ; pid=2804 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-06-22 11:46:57 UTC", "InactiveEnterTimestampMonotonic": "634371775", "InactiveExitTimestamp": "Mon 2026-06-22 11:46:57 UTC", "InactiveExitTimestampMonotonic": "634386437", "InvocationID": "33fbe7eb96ef441a9383139c90988a06", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2800", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2072576", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-22 11:46:57 UTC", "StateChangeTimestampMonotonic": "634516604", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:46:58.945705 | debian-bookworm | 2026-06-22 11:46:58.945726 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-22 11:46:58.945733 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-22 11:46:58.945739 | debian-bookworm | 2026-06-22 11:46:59.050885 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-22 11:46:59.051588 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-22 11:46:59.218329 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008283", "end": "2026-06-22 11:46:59.174496", "msg": "", "rc": 0, "start": "2026-06-22 11:46:59.166213", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-22 11:46:59.218632 | ubuntu-noble | 2026-06-22 11:46:59.218931 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-22 11:46:59.605008 | debian-bookworm | ok: Runtime: 0:00:17.539579 2026-06-22 11:46:59.605566 | ubuntu-noble | --- before 2026-06-22 11:46:59.607889 | ubuntu-noble | +++ after 2026-06-22 11:46:59.607934 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-22 11:46:59.607947 | ubuntu-noble | { 2026-06-22 11:46:59.607958 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-22 11:46:59.607969 | ubuntu-noble | - "state": "file" 2026-06-22 11:46:59.607980 | ubuntu-noble | + "state": "absent" 2026-06-22 11:46:59.608172 | ubuntu-noble | } 2026-06-22 11:46:59.608591 | ubuntu-noble | 2026-06-22 11:46:59.609120 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-22 11:46:59.609490 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-22 11:46:59.609776 | ubuntu-noble | 2026-06-22 11:46:59.610213 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-22 11:47:00.346485 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ActiveEnterTimestampMonotonic": "210259883", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-journald.socket systemd-tmpfiles-setup.service local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:46:50 UTC", "AssertTimestampMonotonic": "210174950", "Before": "shutdown.target ssh.service sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "52879000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ConditionTimestampMonotonic": "210174904", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2299", "ExecMainStartTimestamp": "Mon 2026-06-22 11:46:50 UTC", "ExecMainStartTimestampMonotonic": "210218383", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2298 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2298 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2303 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:46:50 UTC] ; stop_time=[Mon 2026-06-22 11:46:50 UTC] ; pid=2303 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-22 11:46:50 UTC", "InactiveExitTimestampMonotonic": "210183308", "InvocationID": "101be3dff6aa486c86d6df09220880dd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2299", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3565420544", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2129920", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-22 11:46:50 UTC", "StateChangeTimestampMonotonic": "210259883", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:47:00.354786 | ubuntu-noble | 2026-06-22 11:47:00.354923 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-22 11:47:00.803386 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.083746", "end": "2026-06-22 11:47:00.745655", "msg": "", "rc": 0, "start": "2026-06-22 11:47:00.661909", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2692\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 72\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2692\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 63\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2692", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 72", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2692", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 63", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-22 11:47:00.803449 | ubuntu-noble | 2026-06-22 11:47:00.803557 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-22 11:47:01.852652 | ubuntu-noble | ok: Runtime: 0:00:20.147067 2026-06-22 11:47:01.876863 | 2026-06-22 11:47:01.877015 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-22 11:47:01.586211 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-22 11:47:00 UTC", "ActiveEnterTimestampMonotonic": "219561817", "ActiveExitTimestamp": "Mon 2026-06-22 11:47:00 UTC", "ActiveExitTimestampMonotonic": "219422509", "ActiveState": "active", "After": "system.slice systemd-journald.socket systemd-tmpfiles-setup.service local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-22 11:47:00 UTC", "AssertTimestampMonotonic": "219463653", "Before": "shutdown.target ssh.service sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "145235000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-22 11:47:00 UTC", "ConditionTimestampMonotonic": "219463558", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2692", "ExecMainStartTimestamp": "Mon 2026-06-22 11:47:00 UTC", "ExecMainStartTimestampMonotonic": "219486994", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-22 11:47:00 UTC] ; stop_time=[Mon 2026-06-22 11:47:00 UTC] ; pid=2690 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-22 11:47:00 UTC] ; stop_time=[Mon 2026-06-22 11:47:00 UTC] ; pid=2690 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-22 11:47:00 UTC] ; stop_time=[Mon 2026-06-22 11:47:00 UTC] ; pid=2695 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-22 11:47:00 UTC] ; stop_time=[Mon 2026-06-22 11:47:00 UTC] ; pid=2695 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-06-22 11:47:00 UTC", "InactiveEnterTimestampMonotonic": "219461373", "InactiveExitTimestamp": "Mon 2026-06-22 11:47:00 UTC", "InactiveExitTimestampMonotonic": "219471646", "InvocationID": "b5ab303c007049ba877706c3cde7358c", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2692", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3572682752", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2199552", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-22 11:47:00 UTC", "StateChangeTimestampMonotonic": "219561817", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-22 11:47:01.589285 | ubuntu-noble | 2026-06-22 11:47:01.589381 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-22 11:47:01.589564 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-22 11:47:01.589698 | ubuntu-noble | 2026-06-22 11:47:01.691783 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-22 11:47:01.692606 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-22 11:47:02.700511 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:47:02.712427 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:47:02.568339 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-22 11:47:02.579938 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:47:03.254356 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:47:03.255360 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:47:03.279695 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:47:03.285612 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-22 11:47:03.285681 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:47:03.075814 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-22 11:47:03.076693 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-22 11:47:03.099513 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-22 11:47:03.105243 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-22 11:47:03.105418 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-22 11:47:04.884910 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-22 11:47:04.885679 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-22 11:47:04.886948 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:47:04.886974 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:47:04.886983 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:47:04.886990 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:47:04.886997 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:47:04.887003 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-22 11:47:04.887008 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:47:04.887014 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-22 11:47:04.887020 | ubuntu-noble | 2026-06-22 11:47:04.887216 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:47:04.887225 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-22 11:47:04.887231 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:47:04.887237 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-22 11:47:04.887243 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:47:04.887249 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:47:04.887255 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:47:04.887261 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:47:04.887267 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:47:04.887273 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:47:04.887279 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:47:04.887284 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:47:04.887290 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:47:04.887296 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:47:04.887301 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:47:04.887307 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:47:04.887313 | ubuntu-noble | 2026-06-22 11:47:04.887513 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:47:04.600321 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-22 11:47:04.602416 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-22 11:47:04.603580 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-22 11:47:04.603619 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-22 11:47:04.603629 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-22 11:47:04.603637 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-22 11:47:04.603643 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-22 11:47:04.603650 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-22 11:47:04.603655 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-22 11:47:04.603662 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-22 11:47:04.603668 | debian-bookworm | 2026-06-22 11:47:04.603862 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-22 11:47:04.603873 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-22 11:47:04.603879 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-22 11:47:04.603885 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-22 11:47:04.603892 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-22 11:47:04.603899 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-22 11:47:04.603905 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-22 11:47:04.603911 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-22 11:47:04.603918 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-22 11:47:04.603925 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-22 11:47:04.603931 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-22 11:47:04.603937 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-22 11:47:04.603943 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-22 11:47:04.603949 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-22 11:47:04.603955 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-22 11:47:04.603961 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:47:04.603967 | debian-bookworm | 2026-06-22 11:47:04.604175 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-22 11:47:04.858662 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-22 11:47:04.874077 | debian-bookworm | ============================= test session starts ============================== 2026-06-22 11:47:04.874777 | debian-bookworm | platform linux -- Python 3.11.2, pytest-9.1.0, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-22 11:47:04.875369 | debian-bookworm | using: pytest-9.1.0 2026-06-22 11:47:04.875935 | debian-bookworm | registered third-party plugins: 2026-06-22 11:47:04.876367 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-22 11:47:04.876896 | debian-bookworm | rootdir: /home/zuul 2026-06-22 11:47:04.877360 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-22 11:47:05.223335 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-22 11:47:05.250090 | ubuntu-noble | ============================= test session starts ============================== 2026-06-22 11:47:05.250434 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-9.1.0, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-22 11:47:05.250666 | ubuntu-noble | using: pytest-9.1.0 2026-06-22 11:47:05.250961 | ubuntu-noble | registered third-party plugins: 2026-06-22 11:47:05.251197 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-22 11:47:05.251407 | ubuntu-noble | rootdir: /home/zuul 2026-06-22 11:47:05.251619 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-22 11:47:05.900686 | debian-bookworm | collecting ... collected 6 items 2026-06-22 11:47:05.900771 | debian-bookworm | 2026-06-22 11:47:06.359655 | ubuntu-noble | collecting ... collected 6 items 2026-06-22 11:47:06.359739 | ubuntu-noble | 2026-06-22 11:47:10.129176 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-22 11:47:10.167388 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-22 11:47:11.123221 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-22 11:47:11.166885 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-22 11:47:12.644672 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-22 11:47:13.562533 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-22 11:47:17.596473 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-22 11:47:18.355069 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-22 11:47:18.920047 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-22 11:47:18.984818 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-22 11:47:18.985367 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-22 11:47:18.985474 | debian-bookworm | 2026-06-22 11:47:18.985587 | debian-bookworm | ============================== 6 passed in 14.09s ============================== 2026-06-22 11:47:19.027242 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-22 11:47:19.027358 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-22 11:47:19.027789 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-22 11:47:19.441320 | debian-bookworm | ok: Runtime: 0:00:16.854723 2026-06-22 11:47:19.751541 | ubuntu-noble | ok: Runtime: 0:00:17.379365 2026-06-22 11:47:19.757795 | 2026-06-22 11:47:19.757936 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-22 11:47:19.592689 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-22 11:47:19.631347 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-22 11:47:19.631769 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-22 11:47:19.632152 | ubuntu-noble | 2026-06-22 11:47:19.632300 | ubuntu-noble | ============================== 6 passed in 14.37s ============================== 2026-06-22 11:47:19.667177 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-22 11:47:19.667275 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-22 11:47:19.667539 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-22 11:47:20.314508 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:47:20.315750 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:47:20.338044 | 2026-06-22 11:47:20.338164 | PLAY RECAP 2026-06-22 11:47:20.338234 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-22 11:47:20.338273 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-22 11:47:20.338299 | 2026-06-22 11:47:20.523173 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-22 11:47:20.525422 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-22 11:47:21.367191 | 2026-06-22 11:47:21.367472 | PLAY [Collect container logs] 2026-06-22 11:47:21.382805 | 2026-06-22 11:47:21.382997 | TASK [Create container log directory] 2026-06-22 11:47:22.020044 | ubuntu-noble | changed 2026-06-22 11:47:22.071388 | debian-bookworm | changed 2026-06-22 11:47:22.079056 | 2026-06-22 11:47:22.079222 | TASK [Capture container overview] 2026-06-22 11:47:22.635907 | ubuntu-noble | ok: Runtime: 0:00:00.006423 2026-06-22 11:47:22.648497 | debian-bookworm | ok: Runtime: 0:00:00.011637 2026-06-22 11:47:22.657600 | 2026-06-22 11:47:22.657803 | TASK [List containers] 2026-06-22 11:47:23.221291 | debian-bookworm | ok: ERROR (ignored) 2026-06-22 11:47:23.221752 | debian-bookworm | { 2026-06-22 11:47:23.221813 | debian-bookworm | "failed_when_result": false, 2026-06-22 11:47:23.221853 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-22 11:47:23.221897 | debian-bookworm | "rc": 2 2026-06-22 11:47:23.221930 | debian-bookworm | } 2026-06-22 11:47:23.231279 | ubuntu-noble | ok: ERROR (ignored) 2026-06-22 11:47:23.231524 | ubuntu-noble | { 2026-06-22 11:47:23.231577 | ubuntu-noble | "failed_when_result": false, 2026-06-22 11:47:23.231614 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-22 11:47:23.231650 | ubuntu-noble | "rc": 2 2026-06-22 11:47:23.231682 | ubuntu-noble | } 2026-06-22 11:47:23.240338 | 2026-06-22 11:47:23.240593 | LOOP [Save per-container logs] 2026-06-22 11:47:23.329397 | 2026-06-22 11:47:23.329763 | LOOP [Save per-container inspect (state and health)] 2026-06-22 11:47:23.415805 | 2026-06-22 11:47:23.416123 | TASK [Open container log permissions] 2026-06-22 11:47:23.721759 | debian-bookworm | ok 2026-06-22 11:47:23.727922 | ubuntu-noble | changed 2026-06-22 11:47:23.729856 | 2026-06-22 11:47:23.729945 | PLAY RECAP 2026-06-22 11:47:23.730019 | debian-bookworm | ok: 4 changed: 1 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-22 11:47:23.730055 | ubuntu-noble | ok: 4 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-22 11:47:23.730077 | 2026-06-22 11:47:23.880902 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-22 11:47:23.884342 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-22 11:47:24.704755 | 2026-06-22 11:47:24.704955 | PLAY [Base post-fetch] 2026-06-22 11:47:24.720685 | 2026-06-22 11:47:24.720853 | TASK [diagnose-network : Ensure log directory exists] 2026-06-22 11:47:25.402312 | ubuntu-noble | ok 2026-06-22 11:47:25.442084 | debian-bookworm | ok 2026-06-22 11:47:25.455248 | 2026-06-22 11:47:25.455484 | TASK [diagnose-network : Snapshot dual-stack network state (post)] 2026-06-22 11:47:37.368977 | ubuntu-noble | ok: Runtime: 0:00:05.952076 2026-06-22 11:48:03.687391 | debian-bookworm | ok: Runtime: 0:00:34.744114 2026-06-22 11:48:03.695789 | 2026-06-22 11:48:03.695945 | TASK [diagnose-network : Snapshot Docker/BuildKit IPv6 config (teardown)] 2026-06-22 11:48:09.802318 | debian-bookworm | ok: Runtime: 0:00:00.010158 2026-06-22 11:48:09.900647 | ubuntu-noble | ok: Runtime: 0:00:00.011082 2026-06-22 11:48:09.909242 | 2026-06-22 11:48:09.909428 | TASK [diagnose-network : Probe container network namespace (teardown)] 2026-06-22 11:48:16.012684 | debian-bookworm | ok: Runtime: 0:00:00.007903 2026-06-22 11:48:16.118511 | ubuntu-noble | ok: Runtime: 0:00:00.011534 2026-06-22 11:48:16.141483 | 2026-06-22 11:48:16.141652 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-22 11:48:16.214725 | ubuntu-noble | ok 2026-06-22 11:48:16.219548 | debian-bookworm | ok 2026-06-22 11:48:16.226085 | 2026-06-22 11:48:16.226195 | TASK [fetch-output : Set log path for single node] 2026-06-22 11:48:16.261696 | debian-bookworm | skipping: Conditional result was False 2026-06-22 11:48:16.283055 | ubuntu-noble | skipping: Conditional result was False 2026-06-22 11:48:16.295849 | 2026-06-22 11:48:16.296103 | LOOP [fetch-output : Ensure local output dirs] 2026-06-22 11:48:16.636692 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/logs/debian-bookworm" 2026-06-22 11:48:16.644179 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/logs/ubuntu-noble" 2026-06-22 11:48:16.946615 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/artifacts" 2026-06-22 11:48:16.955198 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/artifacts" 2026-06-22 11:48:17.300048 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/docs" 2026-06-22 11:48:17.343837 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/abb28b886f6141799f8730a9a5963d3b/work/docs" 2026-06-22 11:48:17.344025 | debian-bookworm -> localhost | changed: All items complete 2026-06-22 11:48:17.344063 | 2026-06-22 11:48:17.355803 | 2026-06-22 11:48:17.356004 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-22 11:48:18.213079 | debian-bookworm | changed: 2026-06-22 11:48:18.213848 | debian-bookworm | .d..t...... ./ 2026-06-22 11:48:18.214603 | debian-bookworm | >f+++++++++ net-debug.post.txt 2026-06-22 11:48:18.214681 | debian-bookworm | >f+++++++++ net-debug.pre.txt 2026-06-22 11:48:18.214712 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-22 11:48:18.214742 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-22 11:48:18.214767 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-22 11:48:18.214792 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-22 11:48:18.214815 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-22 11:48:18.220842 | ubuntu-noble | changed: 2026-06-22 11:48:18.220943 | ubuntu-noble | .d..t...... ./ 2026-06-22 11:48:18.220972 | ubuntu-noble | >f+++++++++ net-debug.post.txt 2026-06-22 11:48:18.220996 | ubuntu-noble | >f+++++++++ net-debug.pre.txt 2026-06-22 11:48:18.221017 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-22 11:48:18.221038 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-22 11:48:18.221057 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-22 11:48:18.221076 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-22 11:48:18.221094 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-22 11:48:18.782321 | ubuntu-noble | changed: .d..t...... ./ 2026-06-22 11:48:18.802710 | debian-bookworm | changed: .d..t...... ./ 2026-06-22 11:48:19.462092 | ubuntu-noble | changed: .d..t...... ./ 2026-06-22 11:48:19.505435 | debian-bookworm | ok 2026-06-22 11:48:19.505583 | debian-bookworm | changed: All items complete 2026-06-22 11:48:19.505615 | 2026-06-22 11:48:19.535421 | 2026-06-22 11:48:19.535581 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-22 11:48:19.896156 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.012923 2026-06-22 11:48:20.181131 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.012323 2026-06-22 11:48:20.217413 | 2026-06-22 11:48:20.217620 | PLAY RECAP 2026-06-22 11:48:20.217733 | debian-bookworm | ok: 8 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-22 11:48:20.217805 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-22 11:48:20.217872 | 2026-06-22 11:48:20.400821 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-22 11:48:20.404450 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-22 11:48:21.165607 | 2026-06-22 11:48:21.165794 | PLAY [Base post] 2026-06-22 11:48:21.180167 | 2026-06-22 11:48:21.180333 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-22 11:48:22.022000 | debian-bookworm | changed 2026-06-22 11:48:22.098722 | ubuntu-noble | changed 2026-06-22 11:48:22.114682 | 2026-06-22 11:48:22.114893 | PLAY RECAP 2026-06-22 11:48:22.115020 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-22 11:48:22.115067 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-22 11:48:22.115097 | 2026-06-22 11:48:22.273633 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-22 11:48:22.277331 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-22 11:48:23.131926 | 2026-06-22 11:48:23.132137 | PLAY [Base post-logs] 2026-06-22 11:48:23.143712 | 2026-06-22 11:48:23.143900 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-22 11:48:23.678233 | localhost | changed 2026-06-22 11:48:23.697724 | 2026-06-22 11:48:23.697934 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-22 11:48:23.737552 | localhost | ok 2026-06-22 11:48:23.746099 | 2026-06-22 11:48:23.746264 | TASK [Set zuul-log-path fact] 2026-06-22 11:48:23.777074 | localhost | ok 2026-06-22 11:48:23.793140 | 2026-06-22 11:48:23.793308 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-22 11:48:23.832381 | localhost | ok 2026-06-22 11:48:23.838361 | 2026-06-22 11:48:23.838545 | TASK [upload-logs : Create log directories] 2026-06-22 11:48:24.442291 | localhost | changed 2026-06-22 11:48:24.449946 | 2026-06-22 11:48:24.450149 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-22 11:48:25.009348 | localhost -> localhost | ok: Runtime: 0:00:00.009002 2026-06-22 11:48:25.020117 | 2026-06-22 11:48:25.020410 | TASK [upload-logs : Upload logs to log server] 2026-06-22 11:48:25.648127 | localhost | Output suppressed because no_log was given 2026-06-22 11:48:25.650629 | 2026-06-22 11:48:25.650761 | LOOP [upload-logs : Compress console log and json output] 2026-06-22 11:48:25.711965 | localhost | skipping: Conditional result was False 2026-06-22 11:48:25.717894 | localhost | skipping: Conditional result was False 2026-06-22 11:48:25.732942 | 2026-06-22 11:48:25.733152 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-22 11:48:25.810498 | localhost | skipping: Conditional result was False 2026-06-22 11:48:25.810984 | 2026-06-22 11:48:25.824660 | localhost | skipping: Conditional result was False 2026-06-22 11:48:25.837386 | 2026-06-22 11:48:25.837602 | LOOP [upload-logs : Upload console log and json output]