2026-06-02 07:41:23.243165 | Job console starting 2026-06-02 07:41:23.271270 | Updating git repos 2026-06-02 07:41:23.331033 | Cloning repos into workspace 2026-06-02 07:41:23.486448 | Restoring repo states 2026-06-02 07:41:23.517507 | Merging changes 2026-06-02 07:41:24.243935 | Checking out repos 2026-06-02 07:41:24.322917 | Preparing playbooks 2026-06-02 07:41:25.470720 | Running Ansible setup 2026-06-02 07:41:31.821414 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 07:41:32.689130 | 2026-06-02 07:41:32.689417 | PLAY [Base pre] 2026-06-02 07:41:32.708396 | 2026-06-02 07:41:32.708561 | TASK [Setup log path fact] 2026-06-02 07:41:32.741611 | debian-bookworm | ok 2026-06-02 07:41:32.758278 | 2026-06-02 07:41:32.758445 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 07:41:32.788072 | debian-bookworm | ok 2026-06-02 07:41:32.798877 | 2026-06-02 07:41:32.799019 | TASK [emit-job-header : Print job information] 2026-06-02 07:41:32.846361 | # Job Information 2026-06-02 07:41:32.846562 | Ansible Version: 2.16.14 2026-06-02 07:41:32.846599 | Job: ansible-collection-services-molecule-auditd 2026-06-02 07:41:32.846634 | Pipeline: check 2026-06-02 07:41:32.846658 | Executor: 521e9411259a 2026-06-02 07:41:32.846679 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 07:41:32.846702 | Event ID: 4bea4a00-5e56-11f1-80f4-d51eefd91243 2026-06-02 07:41:32.853251 | 2026-06-02 07:41:32.853386 | LOOP [emit-job-header : Print node information] 2026-06-02 07:41:32.981377 | debian-bookworm | ok: 2026-06-02 07:41:32.982909 | debian-bookworm | # Node Information 2026-06-02 07:41:32.982995 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 07:41:32.983024 | debian-bookworm | Hostname: debian 2026-06-02 07:41:32.983047 | debian-bookworm | Username: zuul 2026-06-02 07:41:32.983070 | debian-bookworm | Distro: Debian 12.14 2026-06-02 07:41:32.983094 | debian-bookworm | Provider: regiocloud-a 2026-06-02 07:41:32.983115 | debian-bookworm | Region: 2026-06-02 07:41:32.983136 | debian-bookworm | Label: debian-bookworm 2026-06-02 07:41:32.983174 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 07:41:32.983195 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe12:cba 2026-06-02 07:41:33.029959 | debian-bookworm | ok: 2026-06-02 07:41:33.030082 | debian-bookworm | # Node Information 2026-06-02 07:41:33.030112 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 07:41:33.030136 | debian-bookworm | Hostname: ubuntu 2026-06-02 07:41:33.030197 | debian-bookworm | Username: zuul 2026-06-02 07:41:33.030221 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 07:41:33.030241 | debian-bookworm | Provider: regiocloud-a 2026-06-02 07:41:33.030261 | debian-bookworm | Region: 2026-06-02 07:41:33.030281 | debian-bookworm | Label: ubuntu-noble 2026-06-02 07:41:33.030301 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 07:41:33.030320 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe42:c3b9 2026-06-02 07:41:33.054730 | 2026-06-02 07:41:33.055029 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 07:41:33.674005 | debian-bookworm -> localhost | changed 2026-06-02 07:41:33.684481 | 2026-06-02 07:41:33.684631 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 07:41:35.897561 | ubuntu-noble -> localhost | changed 2026-06-02 07:41:36.425026 | debian-bookworm -> localhost | ok 2026-06-02 07:41:36.445385 | 2026-06-02 07:41:36.445547 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 07:41:36.861428 | debian-bookworm -> localhost | ok 2026-06-02 07:41:36.866753 | 2026-06-02 07:41:36.866865 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 07:41:36.905000 | debian-bookworm | ok 2026-06-02 07:41:36.919036 | ubuntu-noble | ok 2026-06-02 07:41:36.948409 | debian-bookworm | included: /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 07:41:36.948504 | ubuntu-noble | included: /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 07:41:36.961981 | 2026-06-02 07:41:36.962076 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 07:41:38.221040 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 07:41:38.221300 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/cc224eac2a3540c9aa949d4fa250157a_id_rsa 2026-06-02 07:41:38.221347 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/cc224eac2a3540c9aa949d4fa250157a_id_rsa.pub 2026-06-02 07:41:38.221381 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 07:41:38.221414 | debian-bookworm -> localhost | SHA256:5DPil3kiHLz+bfh7mfHX0VI9kKFZxDq7wYjLyJ7VqNo zuul-build-sshkey 2026-06-02 07:41:38.221444 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 07:41:38.221476 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 07:41:38.221504 | debian-bookworm -> localhost | | o+o | 2026-06-02 07:41:38.221531 | debian-bookworm -> localhost | | ++ | 2026-06-02 07:41:38.221557 | debian-bookworm -> localhost | | . o. . .| 2026-06-02 07:41:38.221582 | debian-bookworm -> localhost | | . o o .o| 2026-06-02 07:41:38.221606 | debian-bookworm -> localhost | | + S o o .o| 2026-06-02 07:41:38.221630 | debian-bookworm -> localhost | | o =o* +. ...| 2026-06-02 07:41:38.221654 | debian-bookworm -> localhost | | . Bo*o. o= .o| 2026-06-02 07:41:38.221680 | debian-bookworm -> localhost | | .++=.+..+ . o| 2026-06-02 07:41:38.221704 | debian-bookworm -> localhost | | .oE...o+o . | 2026-06-02 07:41:38.221729 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 07:41:38.221788 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.622873 2026-06-02 07:41:38.230778 | 2026-06-02 07:41:38.230896 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 07:41:38.250000 | debian-bookworm | ok 2026-06-02 07:41:38.265958 | ubuntu-noble | ok 2026-06-02 07:41:38.279063 | debian-bookworm | included: /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 07:41:38.279141 | ubuntu-noble | included: /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 07:41:38.290666 | 2026-06-02 07:41:38.290762 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 07:41:38.315789 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:41:38.326666 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:41:38.335632 | 2026-06-02 07:41:38.335745 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 07:41:39.026379 | debian-bookworm | changed 2026-06-02 07:41:39.142685 | ubuntu-noble | changed 2026-06-02 07:41:39.148452 | 2026-06-02 07:41:39.148555 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 07:41:39.422293 | debian-bookworm | ok 2026-06-02 07:41:39.474857 | ubuntu-noble | ok 2026-06-02 07:41:39.481975 | 2026-06-02 07:41:39.482100 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 07:41:40.168539 | debian-bookworm | changed 2026-06-02 07:41:40.232756 | ubuntu-noble | changed 2026-06-02 07:41:40.242608 | 2026-06-02 07:41:40.242759 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 07:41:40.980476 | debian-bookworm | changed 2026-06-02 07:41:40.985138 | ubuntu-noble | changed 2026-06-02 07:41:40.990069 | 2026-06-02 07:41:40.990155 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 07:41:41.013165 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:41:41.044303 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:41:41.050352 | 2026-06-02 07:41:41.050467 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 07:41:41.475490 | debian-bookworm -> localhost | changed 2026-06-02 07:41:41.496417 | 2026-06-02 07:41:41.496547 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 07:41:41.858746 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/cc224eac2a3540c9aa949d4fa250157a_id_rsa (zuul-build-sshkey) 2026-06-02 07:41:41.859095 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.030856 2026-06-02 07:41:41.865856 | 2026-06-02 07:41:41.865951 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 07:41:42.212638 | debian-bookworm | ok 2026-06-02 07:41:42.230688 | ubuntu-noble | ok 2026-06-02 07:41:42.238942 | 2026-06-02 07:41:42.239033 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 07:41:42.260543 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:41:42.281433 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:41:42.294861 | 2026-06-02 07:41:42.294958 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 07:41:42.676573 | debian-bookworm | ok 2026-06-02 07:41:42.727499 | ubuntu-noble | ok 2026-06-02 07:41:42.742460 | 2026-06-02 07:41:42.742573 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 07:41:42.770650 | debian-bookworm | ok 2026-06-02 07:41:42.787415 | ubuntu-noble | ok 2026-06-02 07:41:42.792556 | 2026-06-02 07:41:42.792668 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 07:41:43.059595 | debian-bookworm -> localhost | ok 2026-06-02 07:41:43.065191 | 2026-06-02 07:41:43.065402 | TASK [validate-host : Collect information about the host] 2026-06-02 07:41:44.180962 | debian-bookworm | ok 2026-06-02 07:41:44.284852 | ubuntu-noble | ok 2026-06-02 07:41:44.295617 | 2026-06-02 07:41:44.295721 | TASK [validate-host : Sanitize hostname] 2026-06-02 07:41:44.345032 | debian-bookworm | ok 2026-06-02 07:41:44.360138 | ubuntu-noble | ok 2026-06-02 07:41:44.364700 | 2026-06-02 07:41:44.364796 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 07:41:44.879727 | debian-bookworm -> localhost | changed 2026-06-02 07:41:44.893159 | ubuntu-noble -> localhost | changed 2026-06-02 07:41:44.904692 | 2026-06-02 07:41:44.904803 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 07:41:45.380623 | ubuntu-noble | ok 2026-06-02 07:41:45.396631 | debian-bookworm | ok 2026-06-02 07:41:45.401050 | 2026-06-02 07:41:45.401143 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 07:41:46.140772 | debian-bookworm -> localhost | changed 2026-06-02 07:41:46.273603 | ubuntu-noble -> localhost | changed 2026-06-02 07:41:46.286381 | 2026-06-02 07:41:46.286483 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 07:41:46.613755 | debian-bookworm | ok 2026-06-02 07:41:46.637569 | ubuntu-noble | ok 2026-06-02 07:41:46.642026 | 2026-06-02 07:41:46.642123 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 07:41:47.904085 | debian-bookworm | changed: 2026-06-02 07:41:47.904389 | debian-bookworm | cd+++++++++ src/ 2026-06-02 07:41:47.906266 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 07:41:47.906425 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 07:41:47.906453 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 07:41:47.906473 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:03.288583 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:03.327688 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:03.630043 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:03.630674 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:03.650636 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:03.656047 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 07:43:03.656142 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:03.875018 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:03.875803 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:03.901197 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:03.907705 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 07:43:03.907795 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:04.772607 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 07:43:04.772982 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 07:43:05.114529 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 07:43:05.114990 | debian-bookworm | config file = None 2026-06-02 07:43:05.115420 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 07:43:05.115871 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 07:43:05.116308 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 07:43:05.116640 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 07:43:05.116955 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 07:43:05.117391 | debian-bookworm | jinja version = 3.1.6 2026-06-02 07:43:05.117699 | debian-bookworm | libyaml = True 2026-06-02 07:43:05.117993 | debian-bookworm | No config file found; using defaults 2026-06-02 07:43:05.118475 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 07:43:05.120237 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 07:43:05.120599 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 07:43:05.121232 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 07:43:05.121615 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 07:43:05.121956 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 07:43:05.122338 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 07:43:05.122806 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 07:43:05.123141 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 07:43:05.123875 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 07:43:05.124150 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 07:43:05.125044 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 07:43:05.125466 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 07:43:05.125738 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 07:43:05.126124 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 07:43:05.126413 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 07:43:05.126778 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 07:43:05.127519 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 07:43:05.127855 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 07:43:05.128724 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 07:43:05.129106 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 07:43:05.129386 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 07:43:05.129687 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 07:43:05.129902 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 07:43:05.130203 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 07:43:05.130409 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 07:43:05.130678 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 07:43:05.131423 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 07:43:05.131764 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 07:43:05.132603 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 07:43:05.132922 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 07:43:05.134759 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 07:43:05.135097 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 07:43:05.135329 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 07:43:05.135660 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 07:43:05.136494 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 07:43:05.136790 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 07:43:05.137102 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 07:43:05.137483 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 07:43:05.137693 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 07:43:05.138007 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 07:43:05.174443 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 07:43:05.174829 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 07:43:05.175242 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 07:43:05.175580 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 07:43:05.175930 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 07:43:05.176229 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 07:43:05.177460 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 07:43:05.177844 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 07:43:05.178238 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 07:43:05.178628 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 07:43:05.179010 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 07:43:05.179322 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 07:43:05.179696 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 07:43:05.179989 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 07:43:05.181082 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 07:43:05.181488 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 07:43:05.181822 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 07:43:05.182182 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 07:43:05.182695 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 07:43:05.183023 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 07:43:05.183371 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 07:43:05.183696 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 07:43:05.184308 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 07:43:05.184631 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 07:43:05.185188 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 07:43:05.185476 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 07:43:05.185744 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 07:43:05.186013 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 07:43:05.186300 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 07:43:05.186573 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 07:43:05.186842 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 07:43:05.187107 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 07:43:05.188640 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 07:43:05.188956 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 07:43:05.189400 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 07:43:05.189633 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 07:43:05.190325 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 07:43:05.190627 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 07:43:05.190891 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 07:43:05.191201 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 07:43:05.191701 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 07:43:05.191997 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 07:43:05.193042 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 07:43:05.193274 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 07:43:05.194646 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 07:43:05.194940 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 07:43:05.195244 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 07:43:05.195533 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 07:43:05.196510 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 07:43:05.196816 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 07:43:05.197123 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 07:43:05.197420 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 07:43:05.197779 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 07:43:05.198008 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 07:43:05.199604 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 07:43:05.199926 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 07:43:05.202295 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 07:43:05.202604 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 07:43:05.202865 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 07:43:05.203194 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 07:43:05.203534 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 07:43:05.203810 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 07:43:05.205660 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 07:43:05.205991 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 07:43:05.207040 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 07:43:05.207281 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 07:43:05.207570 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 07:43:05.207853 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 07:43:05.213646 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 07:43:05.213884 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 07:43:05.214384 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 07:43:05.214716 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 07:43:05.216667 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 07:43:05.216992 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 07:43:05.217408 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 07:43:05.217747 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 07:43:05.218210 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 07:43:05.218496 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 07:43:05.218794 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 07:43:05.219069 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 07:43:05.219640 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 07:43:05.219909 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 07:43:05.220220 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 07:43:05.220513 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 07:43:05.220724 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 07:43:05.220987 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 07:43:05.221350 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 07:43:05.221607 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 07:43:05.221821 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 07:43:05.222098 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 07:43:05.223055 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 07:43:05.223287 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 07:43:05.223555 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 07:43:05.223832 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 07:43:05.224044 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 07:43:05.224308 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 07:43:05.224631 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 07:43:05.224896 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 07:43:05.225327 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 07:43:05.225633 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 07:43:05.226093 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 07:43:05.226399 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 07:43:05.226683 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 07:43:05.226996 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 07:43:05.227293 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 07:43:05.227569 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 07:43:05.228376 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 07:43:05.228738 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 07:43:05.229031 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 07:43:05.229420 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 07:43:05.229660 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 07:43:05.229931 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 07:43:05.230327 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 07:43:05.230598 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 07:43:05.231083 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 07:43:05.231399 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 07:43:05.231795 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 07:43:05.232065 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 07:43:05.232727 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 07:43:05.233050 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 07:43:05.233520 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 07:43:05.233825 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 07:43:05.234280 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 07:43:05.234564 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 07:43:05.234917 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 07:43:05.235223 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 07:43:05.235480 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 07:43:05.235765 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 07:43:05.236187 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 07:43:05.236473 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 07:43:05.237562 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 07:43:05.237883 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 07:43:05.241168 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 07:43:05.241524 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 07:43:05.241893 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 07:43:05.242200 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 07:43:05.244610 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 07:43:05.244937 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 07:43:05.245189 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 07:43:05.245513 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 07:43:05.253888 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 07:43:05.254291 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 07:43:05.254799 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 07:43:05.255111 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 07:43:05.255427 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 07:43:05.255721 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 07:43:05.256558 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 07:43:05.256882 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 07:43:05.257223 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 07:43:05.257534 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 07:43:05.257837 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 07:43:05.258151 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 07:43:05.261389 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 07:43:05.261712 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 07:43:05.262737 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 07:43:05.263038 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 07:43:05.267428 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 07:43:05.267800 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 07:43:05.271406 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 07:43:05.271797 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 07:43:05.271976 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 07:43:05.290276 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 07:43:05.290806 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 07:43:05.494510 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 07:43:05.494934 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 07:43:05.700929 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 07:43:05.703358 | ubuntu-noble | config file = None 2026-06-02 07:43:05.703385 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 07:43:05.703391 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 07:43:05.703402 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 07:43:05.703410 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 07:43:05.703418 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 07:43:05.703664 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 07:43:05.703949 | ubuntu-noble | libyaml = True 2026-06-02 07:43:05.704260 | ubuntu-noble | No config file found; using defaults 2026-06-02 07:43:05.704833 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 07:43:05.714521 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 07:43:05.715023 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 07:43:05.725466 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 07:43:05.725983 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 07:43:05.726318 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 07:43:05.726752 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 07:43:05.727248 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 07:43:05.727671 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 07:43:05.728106 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 07:43:05.728557 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 07:43:05.729032 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 07:43:05.729502 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 07:43:05.729883 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 07:43:05.730373 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 07:43:05.730787 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 07:43:05.731178 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 07:43:05.731593 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 07:43:05.731985 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 07:43:05.732455 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 07:43:05.732806 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 07:43:05.733093 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 07:43:05.733497 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 07:43:05.736251 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 07:43:05.736584 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 07:43:05.738353 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 07:43:05.738668 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 07:43:05.742841 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 07:43:05.743288 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 07:43:05.743621 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 07:43:05.744050 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 07:43:05.744425 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 07:43:05.744816 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 07:43:05.745115 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 07:43:05.745474 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 07:43:05.745868 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 07:43:05.746194 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 07:43:05.768674 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 07:43:05.769558 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 07:43:05.770006 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 07:43:05.770397 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 07:43:05.770678 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 07:43:05.771047 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 07:43:05.771413 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 07:43:05.771690 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 07:43:05.772043 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 07:43:05.772403 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 07:43:05.772750 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 07:43:05.773033 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 07:43:05.773368 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 07:43:05.774359 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 07:43:05.775013 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 07:43:05.775382 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 07:43:05.776257 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 07:43:05.776604 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 07:43:05.777639 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 07:43:05.777914 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 07:43:05.778633 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 07:43:05.778912 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 07:43:05.779239 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 07:43:05.779560 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 07:43:05.779838 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 07:43:05.780120 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 07:43:05.780445 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 07:43:05.780748 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 07:43:05.782481 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 07:43:05.782560 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 07:43:05.786102 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 07:43:05.786167 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 07:43:05.788267 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 07:43:05.788302 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 07:43:05.789547 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 07:43:05.789580 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 07:43:05.792369 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 07:43:05.792402 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 07:43:05.792412 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 07:43:05.792420 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 07:43:05.792583 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 07:43:05.792908 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 07:43:05.793321 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 07:43:05.793642 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 07:43:05.793991 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 07:43:05.794316 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 07:43:05.794687 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 07:43:05.795062 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 07:43:05.795512 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 07:43:05.795807 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 07:43:05.796192 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 07:43:05.796500 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 07:43:05.796806 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 07:43:05.797233 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 07:43:05.797545 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 07:43:05.797823 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 07:43:05.799266 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 07:43:05.799634 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 07:43:05.799985 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 07:43:05.800263 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 07:43:05.801701 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 07:43:05.802071 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 07:43:05.802354 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 07:43:05.802642 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 07:43:05.804744 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 07:43:05.805208 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 07:43:05.806363 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 07:43:05.806393 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 07:43:05.806402 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 07:43:05.806410 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 07:43:05.806658 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 07:43:05.806898 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 07:43:05.807253 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 07:43:05.807530 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 07:43:05.807830 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 07:43:05.808056 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 07:43:05.818306 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 07:43:05.819049 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 07:43:05.819597 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 07:43:05.820008 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 07:43:05.820577 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 07:43:05.820958 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 07:43:05.821449 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 07:43:05.821840 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 07:43:05.823389 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 07:43:05.823439 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 07:43:05.823462 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 07:43:05.823613 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 07:43:05.824163 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 07:43:05.824571 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 07:43:05.825056 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 07:43:05.825534 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 07:43:05.825877 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 07:43:05.826205 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 07:43:05.826542 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 07:43:05.826850 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 07:43:05.827309 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 07:43:05.827659 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 07:43:05.828061 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 07:43:05.828426 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 07:43:05.828842 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 07:43:05.829223 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 07:43:05.829648 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 07:43:05.829919 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 07:43:05.830212 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 07:43:05.830494 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 07:43:05.830830 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 07:43:05.831167 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 07:43:05.831514 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 07:43:05.831859 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 07:43:05.833780 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 07:43:05.833809 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 07:43:05.833817 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 07:43:05.833823 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 07:43:05.834645 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 07:43:05.834925 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 07:43:05.837385 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 07:43:05.837440 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 07:43:05.837452 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 07:43:05.837523 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 07:43:05.877795 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 07:43:05.878528 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 07:43:05.878952 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 07:43:05.879398 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 07:43:05.879898 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 07:43:05.880295 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 07:43:05.880762 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 07:43:05.881433 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 07:43:05.881816 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 07:43:05.882190 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 07:43:05.882546 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 07:43:05.882937 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 07:43:05.883384 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 07:43:05.883706 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 07:43:05.884015 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 07:43:05.884383 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 07:43:05.884809 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 07:43:05.885154 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 07:43:05.885624 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 07:43:05.885946 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 07:43:05.886272 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 07:43:05.887371 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 07:43:05.887399 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 07:43:05.887410 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 07:43:05.887598 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 07:43:05.887938 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 07:43:05.888295 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 07:43:05.888583 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 07:43:05.888843 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 07:43:05.889092 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 07:43:05.889462 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 07:43:05.889733 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 07:43:05.894476 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 07:43:05.894827 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 07:43:05.895546 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 07:43:05.895918 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 07:43:05.896253 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 07:43:05.896548 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 07:43:05.896861 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 07:43:05.897147 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 07:43:05.897450 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 07:43:05.897685 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 07:43:05.901609 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 07:43:05.902144 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 07:43:05.902161 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 07:43:06.036221 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 07:43:06.150453 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 07:43:06.150724 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 07:43:06.734960 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 07:43:06.789690 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 07:43:07.245548 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 07:43:07.245673 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 07:43:07.509656 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 07:43:08.176390 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 07:43:08.176432 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 07:43:08.643410 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 07:43:08.643719 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 07:43:08.809652 | debian-bookworm | Starting galaxy collection install process 2026-06-02 07:43:08.809932 | debian-bookworm | Process install dependency map 2026-06-02 07:43:08.810241 | debian-bookworm | Starting collection install process 2026-06-02 07:43:08.810528 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 07:43:08.810813 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 07:43:08.811091 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 07:43:08.811397 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 07:43:08.811688 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1827m7kcxc69/tmpac3uhluj/osism-commons-0.20260601.0-ai0cgv2_ 2026-06-02 07:43:08.811969 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 07:43:08.812296 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 07:43:08.885155 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 07:43:08.885530 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 07:43:08.886440 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 07:43:09.463743 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 07:43:09.464376 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 07:43:09.644078 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 07:43:09.644281 | ubuntu-noble | Process install dependency map 2026-06-02 07:43:09.644303 | ubuntu-noble | Starting collection install process 2026-06-02 07:43:09.644315 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 07:43:09.644455 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 07:43:09.644573 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 07:43:09.644676 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 07:43:09.644805 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-165073fp3m1r/tmpmz8mcg_h/osism-commons-0.20260601.0-w13exk7q 2026-06-02 07:43:09.644862 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 07:43:09.645045 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 07:43:09.736391 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 07:43:09.736442 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 07:43:09.736662 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 07:43:10.013194 | debian-bookworm | ok: Runtime: 0:00:06.207833 2026-06-02 07:43:10.031181 | ubuntu-noble | ok: Runtime: 0:00:07.004032 2026-06-02 07:43:10.040990 | 2026-06-02 07:43:10.041134 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 07:43:10.597462 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:43:10.598516 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:43:10.609913 | 2026-06-02 07:43:10.610159 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 07:43:11.287195 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:11.296886 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:11.370294 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:11.379677 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:11.735179 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:11.735776 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:11.755684 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:11.761147 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 07:43:11.761208 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:11.933429 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:11.934235 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:11.959004 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:11.964814 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 07:43:11.964904 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:12.914204 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 07:43:13.234778 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 07:43:13.234838 | debian-bookworm | config file = None 2026-06-02 07:43:13.234856 | debian-bookworm | configured module search path = 2026-06-02 07:43:13.234861 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 07:43:13.234869 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 07:43:13.234873 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 07:43:13.234878 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 07:43:13.234882 | debian-bookworm | jinja version = 3.1.6 2026-06-02 07:43:13.234886 | debian-bookworm | libyaml = True 2026-06-02 07:43:13.234938 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:13.234944 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:13.234948 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:13.234952 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:13.234956 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:13.234960 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 07:43:13.234964 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:13.234968 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:13.234972 | debian-bookworm | 2026-06-02 07:43:13.235175 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:13.235181 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 07:43:13.235185 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:13.235189 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:13.235193 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:13.235197 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:13.235201 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:13.235206 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:13.235210 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:13.235215 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:13.235219 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:13.235223 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:13.235226 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:13.235230 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:13.235234 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:13.235238 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:13.235242 | debian-bookworm | 2026-06-02 07:43:13.235489 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:13.500399 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 07:43:13.337863 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 07:43:13.736533 | debian-bookworm | 2026-06-02 07:43:13.736952 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 07:43:13.737436 | debian-bookworm | 2026-06-02 07:43:13.737816 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 07:43:13.715156 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 07:43:13.715212 | ubuntu-noble | config file = None 2026-06-02 07:43:13.715227 | ubuntu-noble | configured module search path = 2026-06-02 07:43:13.715234 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 07:43:13.715240 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 07:43:13.715244 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 07:43:13.715247 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 07:43:13.715251 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 07:43:13.715255 | ubuntu-noble | libyaml = True 2026-06-02 07:43:13.715346 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:13.715354 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:13.715358 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:13.715361 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:13.715365 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:13.715369 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 07:43:13.715372 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:13.715376 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:13.715380 | ubuntu-noble | 2026-06-02 07:43:13.715519 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:13.715525 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 07:43:13.715529 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:13.715532 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:13.715536 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:13.715540 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:13.715544 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:13.715547 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:13.715551 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:13.715555 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:13.715558 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:13.715562 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:13.715565 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:13.715568 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:13.715572 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:13.715575 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:13.715579 | ubuntu-noble | 2026-06-02 07:43:13.715722 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:14.029389 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 07:43:14.307071 | ubuntu-noble | 2026-06-02 07:43:14.307502 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 07:43:14.307801 | ubuntu-noble | 2026-06-02 07:43:14.309602 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 07:43:14.822186 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 07:43:14.822266 | debian-bookworm | 2026-06-02 07:43:14.822609 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 07:43:15.586384 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 07:43:15.586616 | ubuntu-noble | 2026-06-02 07:43:15.586778 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 07:43:19.122089 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.6 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.6 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:19.122184 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 18.2 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 18.2 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:19.122318 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:19.122410 | debian-bookworm | 2026-06-02 07:43:19.122514 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 07:43:19.142499 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 07:43:19.142593 | debian-bookworm | 2026-06-02 07:43:19.142700 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 07:43:19.142806 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 07:43:19.142900 | debian-bookworm | 2026-06-02 07:43:19.218535 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 07:43:19.218858 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 07:43:20.532873 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.2 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.2 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:20.533572 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.6 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.6 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:20.533811 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 07:43:20.533980 | ubuntu-noble | 2026-06-02 07:43:20.534152 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 07:43:20.564996 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 07:43:20.565132 | ubuntu-noble | 2026-06-02 07:43:20.565305 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 07:43:20.565521 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 07:43:20.565671 | ubuntu-noble | 2026-06-02 07:43:20.653127 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 07:43:20.653463 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 07:43:21.188012 | debian-bookworm | ok: Runtime: 0:00:08.284006 2026-06-02 07:43:21.194479 | ubuntu-noble | ok: Runtime: 0:00:09.712967 2026-06-02 07:43:21.201075 | 2026-06-02 07:43:21.201185 | TASK [ansible-molecule : Reset connection] 2026-06-02 07:43:21.242257 | 2026-06-02 07:43:21.242425 | TASK [ansible-molecule : Reset connection] 2026-06-02 07:43:21.285987 | 2026-06-02 07:43:21.286259 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 07:43:22.129719 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:22.139416 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:22.234674 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:22.245415 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:22.587629 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:22.588230 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:22.606152 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:22.611555 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 07:43:22.611649 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:22.779280 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:22.780136 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:22.803990 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:22.809950 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 07:43:22.810109 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:23.763666 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 07:43:23.764100 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 07:43:24.113880 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 07:43:24.114364 | debian-bookworm | config file = None 2026-06-02 07:43:24.114916 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 07:43:24.115437 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 07:43:24.115892 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 07:43:24.116312 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 07:43:24.116654 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 07:43:24.117029 | debian-bookworm | jinja version = 3.1.6 2026-06-02 07:43:24.117418 | debian-bookworm | libyaml = True 2026-06-02 07:43:24.117721 | debian-bookworm | No config file found; using defaults 2026-06-02 07:43:24.118231 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 07:43:24.121773 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 07:43:24.122246 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 07:43:24.131901 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 07:43:24.132340 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 07:43:24.132733 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 07:43:24.133174 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 07:43:24.133640 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 07:43:24.134059 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 07:43:24.134705 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 07:43:24.135121 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 07:43:24.136083 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 07:43:24.136455 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 07:43:24.139823 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 07:43:24.140241 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 07:43:24.140718 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 07:43:24.141170 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 07:43:24.141541 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 07:43:24.141935 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 07:43:24.142658 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 07:43:24.143004 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 07:43:24.143411 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 07:43:24.143720 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 07:43:24.144015 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 07:43:24.144301 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 07:43:24.144684 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 07:43:24.145001 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 07:43:24.180510 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 07:43:24.181065 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 07:43:24.181625 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 07:43:24.182215 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 07:43:24.182595 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 07:43:24.182943 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 07:43:24.183306 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 07:43:24.183703 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 07:43:24.184012 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 07:43:24.184296 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 07:43:24.184682 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 07:43:24.185081 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 07:43:24.185542 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 07:43:24.185928 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 07:43:24.186447 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 07:43:24.186756 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 07:43:24.187685 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 07:43:24.188148 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 07:43:24.189174 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 07:43:24.189604 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 07:43:24.195037 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 07:43:24.195414 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 07:43:24.195755 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 07:43:24.196047 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 07:43:24.196396 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 07:43:24.196651 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 07:43:24.197021 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 07:43:24.197317 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 07:43:24.197694 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 07:43:24.197974 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 07:43:24.198330 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 07:43:24.198580 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 07:43:24.200241 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 07:43:24.200580 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 07:43:24.200918 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 07:43:24.201330 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 07:43:24.201584 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 07:43:24.201989 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 07:43:24.202241 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 07:43:24.202585 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 07:43:24.204648 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 07:43:24.205009 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 07:43:24.205396 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 07:43:24.205756 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 07:43:24.206079 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 07:43:24.206394 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 07:43:24.206640 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 07:43:24.206996 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 07:43:24.207259 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 07:43:24.207511 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 07:43:24.207847 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 07:43:24.208158 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 07:43:24.208505 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 07:43:24.208859 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 07:43:24.209420 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 07:43:24.209813 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 07:43:24.210329 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 07:43:24.210716 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 07:43:24.211251 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 07:43:24.211565 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 07:43:24.212554 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 07:43:24.212827 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 07:43:24.213150 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 07:43:24.213476 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 07:43:24.214997 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 07:43:24.215370 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 07:43:24.216221 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 07:43:24.216485 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 07:43:24.216854 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 07:43:24.217152 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 07:43:24.219648 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 07:43:24.219915 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 07:43:24.220211 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 07:43:24.220478 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 07:43:24.220967 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 07:43:24.221240 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 07:43:24.221935 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 07:43:24.222230 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 07:43:24.224097 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 07:43:24.224362 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 07:43:24.224633 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 07:43:24.224990 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 07:43:24.225567 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 07:43:24.225908 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 07:43:24.226477 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 07:43:24.226802 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 07:43:24.227278 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 07:43:24.227631 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 07:43:24.227893 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 07:43:24.228145 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 07:43:24.228916 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 07:43:24.229390 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 07:43:24.229668 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 07:43:24.230050 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 07:43:24.230383 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 07:43:24.230722 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 07:43:24.231072 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 07:43:24.231324 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 07:43:24.232265 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 07:43:24.232588 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 07:43:24.233050 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 07:43:24.233347 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 07:43:24.233765 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 07:43:24.234066 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 07:43:24.234449 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 07:43:24.234681 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 07:43:24.235469 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 07:43:24.235778 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 07:43:24.236123 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 07:43:24.236425 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 07:43:24.237074 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 07:43:24.237670 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 07:43:24.238064 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 07:43:24.238380 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 07:43:24.238701 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 07:43:24.239003 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 07:43:24.239808 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 07:43:24.240093 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 07:43:24.240878 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 07:43:24.241173 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 07:43:24.241794 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 07:43:24.242093 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 07:43:24.242364 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 07:43:24.242634 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 07:43:24.243129 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 07:43:24.243397 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 07:43:24.243664 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 07:43:24.243934 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 07:43:24.247427 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 07:43:24.247759 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 07:43:24.248279 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 07:43:24.248529 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 07:43:24.248987 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 07:43:24.249219 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 07:43:24.249536 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 07:43:24.249935 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 07:43:24.250338 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 07:43:24.250617 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 07:43:24.251333 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 07:43:24.251567 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 07:43:24.251803 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 07:43:24.252156 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 07:43:24.252390 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 07:43:24.252604 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 07:43:24.253444 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 07:43:24.253758 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 07:43:24.253990 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 07:43:24.254569 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 07:43:24.254872 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 07:43:24.255093 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 07:43:24.256054 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 07:43:24.256426 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 07:43:24.258794 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 07:43:24.259176 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 07:43:24.259742 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 07:43:24.260012 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 07:43:24.260454 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 07:43:24.260694 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 07:43:24.261745 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 07:43:24.262126 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 07:43:24.262415 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 07:43:24.262662 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 07:43:24.262885 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 07:43:24.263145 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 07:43:24.264152 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 07:43:24.264575 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 07:43:24.264792 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 07:43:24.265100 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 07:43:24.265416 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 07:43:24.265681 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 07:43:24.270238 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 07:43:24.271913 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 07:43:24.273186 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 07:43:24.273545 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 07:43:24.274131 | debian-bookworm | Starting galaxy collection install process 2026-06-02 07:43:24.274291 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 07:43:24.181670 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 07:43:24.182557 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 07:43:24.343304 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 07:43:24.343512 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 07:43:24.360218 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 07:43:24.362745 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 07:43:24.371666 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 07:43:24.371759 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 07:43:24.371848 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 07:43:24.379425 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 07:43:24.700359 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 07:43:24.700418 | debian-bookworm | config file = None 2026-06-02 07:43:24.700426 | debian-bookworm | configured module search path = 2026-06-02 07:43:24.700431 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 07:43:24.700437 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 07:43:24.700441 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 07:43:24.700445 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 07:43:24.700449 | debian-bookworm | jinja version = 3.1.6 2026-06-02 07:43:24.700453 | debian-bookworm | libyaml = True 2026-06-02 07:43:24.700528 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:24.700534 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:24.700539 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:24.700543 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:24.700546 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:24.700550 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 07:43:24.700554 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:24.700558 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:24.700562 | debian-bookworm | 2026-06-02 07:43:24.700750 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:24.700756 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 07:43:24.700760 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:24.700779 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:24.700783 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:24.700787 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:24.700794 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:24.700798 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:24.700804 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:24.700809 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:24.700813 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:24.700817 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:24.700821 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:24.700825 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:24.700828 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:24.700832 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:24.700836 | debian-bookworm | 2026-06-02 07:43:24.701098 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:24.604380 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 07:43:24.604631 | ubuntu-noble | config file = None 2026-06-02 07:43:24.604791 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 07:43:24.604934 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 07:43:24.605123 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 07:43:24.605261 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 07:43:24.605407 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 07:43:24.605530 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 07:43:24.605642 | ubuntu-noble | libyaml = True 2026-06-02 07:43:24.605861 | ubuntu-noble | No config file found; using defaults 2026-06-02 07:43:24.609707 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 07:43:24.631302 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 07:43:24.632313 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 07:43:24.632369 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 07:43:24.634087 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 07:43:24.646131 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 07:43:24.646161 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 07:43:24.646401 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 07:43:24.646703 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 07:43:24.647129 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 07:43:24.647357 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 07:43:24.651455 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 07:43:24.651783 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 07:43:24.652201 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 07:43:24.652520 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 07:43:24.653033 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 07:43:24.653265 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 07:43:24.654061 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 07:43:24.654367 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 07:43:24.655124 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 07:43:24.655435 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 07:43:24.657228 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 07:43:24.657557 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 07:43:24.657787 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 07:43:24.658030 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 07:43:24.658389 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 07:43:24.658612 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 07:43:24.659891 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 07:43:24.659919 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 07:43:24.660166 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 07:43:24.660484 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 07:43:24.660721 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 07:43:24.660928 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 07:43:24.661173 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 07:43:24.661402 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 07:43:24.664554 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 07:43:24.667390 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 07:43:24.667442 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 07:43:24.667486 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 07:43:24.667500 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 07:43:24.667512 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 07:43:24.667884 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 07:43:24.668312 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 07:43:24.668730 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 07:43:24.669266 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 07:43:24.669652 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 07:43:24.670040 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 07:43:24.670451 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 07:43:24.670819 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 07:43:24.671189 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 07:43:24.671578 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 07:43:24.671934 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 07:43:24.672375 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 07:43:24.672818 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 07:43:24.673161 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 07:43:24.673497 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 07:43:24.673838 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 07:43:24.674188 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 07:43:24.674535 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 07:43:24.690096 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 07:43:24.690597 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 07:43:24.691037 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 07:43:24.691383 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 07:43:24.691824 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 07:43:24.692290 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 07:43:24.693246 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 07:43:24.693706 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 07:43:24.694509 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 07:43:24.694848 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 07:43:24.695234 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 07:43:24.695527 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 07:43:24.695862 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 07:43:24.696150 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 07:43:24.696599 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 07:43:24.696928 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 07:43:24.697401 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 07:43:24.697753 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 07:43:24.698144 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 07:43:24.698445 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 07:43:24.698743 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 07:43:24.699107 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 07:43:24.699484 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 07:43:24.699813 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 07:43:24.700603 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 07:43:24.700903 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 07:43:24.701757 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 07:43:24.701780 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 07:43:24.702447 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 07:43:24.702472 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 07:43:24.743423 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 07:43:24.743508 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 07:43:24.743883 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 07:43:24.744443 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 07:43:24.745051 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 07:43:24.745558 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 07:43:24.745973 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 07:43:24.746548 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 07:43:24.747474 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 07:43:24.747795 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 07:43:24.750832 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 07:43:24.752357 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 07:43:24.752387 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 07:43:24.752397 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 07:43:24.752404 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 07:43:24.752411 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 07:43:24.752459 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 07:43:24.752748 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 07:43:24.753018 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 07:43:24.753296 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 07:43:24.753969 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 07:43:24.754299 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 07:43:24.754841 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 07:43:24.755138 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 07:43:24.755418 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 07:43:24.755735 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 07:43:24.756931 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 07:43:24.757221 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 07:43:24.757474 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 07:43:24.757715 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 07:43:24.757938 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 07:43:24.758263 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 07:43:24.758905 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 07:43:24.759169 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 07:43:24.759642 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 07:43:24.759875 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 07:43:24.766091 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 07:43:24.766375 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 07:43:24.766632 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 07:43:24.766880 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 07:43:24.767376 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 07:43:24.767615 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 07:43:24.770187 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 07:43:24.770837 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 07:43:24.771360 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 07:43:24.773149 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 07:43:24.773194 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 07:43:24.773208 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 07:43:24.773219 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 07:43:24.773228 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 07:43:24.774921 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 07:43:24.775009 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 07:43:24.775021 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 07:43:24.775031 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 07:43:24.775452 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 07:43:24.775862 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 07:43:24.776280 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 07:43:24.776636 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 07:43:24.777114 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 07:43:24.777417 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 07:43:24.777682 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 07:43:24.778025 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 07:43:24.778285 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 07:43:24.778560 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 07:43:24.778812 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 07:43:24.779078 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 07:43:24.779425 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 07:43:24.779688 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 07:43:24.779948 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 07:43:24.780265 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 07:43:24.780598 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 07:43:24.780927 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 07:43:24.781217 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 07:43:24.781486 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 07:43:24.781778 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 07:43:24.782092 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 07:43:24.782390 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 07:43:24.782690 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 07:43:24.792040 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 07:43:24.792297 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 07:43:24.792503 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 07:43:24.792682 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 07:43:24.794786 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 07:43:24.795088 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 07:43:24.795464 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 07:43:24.795713 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 07:43:24.796125 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 07:43:24.796383 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 07:43:24.800165 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 07:43:24.800203 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 07:43:24.800210 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 07:43:24.800215 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 07:43:24.800781 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 07:43:24.800802 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 07:43:24.801888 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 07:43:24.801916 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 07:43:24.802155 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 07:43:24.802397 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 07:43:24.802708 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 07:43:24.802921 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 07:43:24.803293 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 07:43:24.803530 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 07:43:24.807195 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 07:43:24.807719 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 07:43:24.807738 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 07:43:24.808044 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 07:43:24.810060 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 07:43:24.810313 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 07:43:24.811178 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 07:43:24.811662 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 07:43:24.811685 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 07:43:24.811894 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 07:43:24.812714 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 07:43:24.812893 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 07:43:24.968253 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 07:43:25.194784 | debian-bookworm | 2026-06-02 07:43:25.195129 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 07:43:25.195405 | debian-bookworm | 2026-06-02 07:43:25.195698 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 07:43:24.887770 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 07:43:24.889399 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 07:43:24.905717 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 07:43:24.908807 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 07:43:24.918641 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 07:43:24.918775 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 07:43:24.918878 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 07:43:24.926980 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 07:43:25.318080 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 07:43:25.318159 | ubuntu-noble | config file = None 2026-06-02 07:43:25.318174 | ubuntu-noble | configured module search path = 2026-06-02 07:43:25.318186 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 07:43:25.318197 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 07:43:25.318208 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 07:43:25.318219 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 07:43:25.318229 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 07:43:25.318240 | ubuntu-noble | libyaml = True 2026-06-02 07:43:25.318796 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:25.318828 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:25.318841 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:25.318851 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:25.318862 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:25.318872 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 07:43:25.318882 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:25.318892 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:25.318907 | ubuntu-noble | 2026-06-02 07:43:25.319258 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:25.319277 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 07:43:25.319287 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:25.319358 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:25.319377 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:25.319388 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:25.319398 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:25.319408 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:25.319418 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:25.319428 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:25.319438 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:25.319448 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:25.319459 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:25.319469 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:25.319479 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:25.319489 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:25.319502 | ubuntu-noble | 2026-06-02 07:43:25.321451 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:25.656234 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 07:43:26.291577 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 07:43:26.291654 | debian-bookworm | 2026-06-02 07:43:26.291765 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 07:43:26.315787 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 07:43:26.315858 | debian-bookworm | 2026-06-02 07:43:26.315983 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 07:43:25.902309 | ubuntu-noble | 2026-06-02 07:43:25.902387 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 07:43:25.902396 | ubuntu-noble | 2026-06-02 07:43:25.902402 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 07:43:26.351356 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 07:43:26.351464 | debian-bookworm | 2026-06-02 07:43:26.351605 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 07:43:26.378200 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 07:43:26.378334 | debian-bookworm | 2026-06-02 07:43:26.378496 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 07:43:27.108033 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 07:43:27.108114 | ubuntu-noble | 2026-06-02 07:43:27.108123 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 07:43:27.142784 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 07:43:27.142835 | ubuntu-noble | 2026-06-02 07:43:27.142843 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 07:43:27.216553 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 07:43:27.216618 | ubuntu-noble | 2026-06-02 07:43:27.216630 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 07:43:27.244245 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 07:43:27.244309 | ubuntu-noble | 2026-06-02 07:43:27.244315 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 07:43:30.268561 | debian-bookworm | The following additional packages will be installed: 2026-06-02 07:43:30.268625 | debian-bookworm | libauparse0 2026-06-02 07:43:30.268639 | debian-bookworm | Suggested packages: 2026-06-02 07:43:30.268790 | debian-bookworm | audispd-plugins 2026-06-02 07:43:30.268943 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 07:43:30.269085 | debian-bookworm | auditd libauparse0 2026-06-02 07:43:30.269228 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 07:43:30.270349 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780386115, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (2954 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (2954 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 07:43:30.270428 | debian-bookworm | 2026-06-02 07:43:30.270577 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 07:43:32.553404 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 07:43:32.553461 | ubuntu-noble | libauparse0t64 2026-06-02 07:43:32.553474 | ubuntu-noble | Suggested packages: 2026-06-02 07:43:32.553484 | ubuntu-noble | audispd-plugins 2026-06-02 07:43:32.553494 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 07:43:32.553692 | ubuntu-noble | auditd libauparse0t64 2026-06-02 07:43:32.553955 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 07:43:32.557384 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780386117, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (1632 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (1632 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 07:43:32.557716 | ubuntu-noble | 2026-06-02 07:43:32.557955 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 07:43:32.983889 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 07:43:32.983963 | debian-bookworm | audispd-plugins 2026-06-02 07:43:32.983976 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 07:43:32.983987 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780386115, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (1011 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (1011 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 07:43:32.984007 | debian-bookworm | 2026-06-02 07:43:32.984015 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 07:43:34.174133 | debian-bookworm | --- before 2026-06-02 07:43:34.174261 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2082ygq24vlk/tmpplqbw0zm/auditd.conf.j2 2026-06-02 07:43:34.174283 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 07:43:34.174426 | debian-bookworm | +# 2026-06-02 07:43:34.174609 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 07:43:34.174778 | debian-bookworm | +# 2026-06-02 07:43:34.174959 | debian-bookworm | + 2026-06-02 07:43:34.175126 | debian-bookworm | +local_events = yes 2026-06-02 07:43:34.175305 | debian-bookworm | +write_logs = yes 2026-06-02 07:43:34.175481 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 07:43:34.175649 | debian-bookworm | +log_group = adm 2026-06-02 07:43:34.175821 | debian-bookworm | +log_format = RAW 2026-06-02 07:43:34.176003 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 07:43:34.176171 | debian-bookworm | +freq = 50 2026-06-02 07:43:34.176339 | debian-bookworm | +max_log_file = 8 2026-06-02 07:43:34.176510 | debian-bookworm | +num_logs = 5 2026-06-02 07:43:34.176678 | debian-bookworm | +priority_boost = 4 2026-06-02 07:43:34.176866 | debian-bookworm | +disp_qos = lossy 2026-06-02 07:43:34.177329 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 07:43:34.177631 | debian-bookworm | +name_format = NONE 2026-06-02 07:43:34.177809 | debian-bookworm | +##name = mydomain 2026-06-02 07:43:34.178043 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 07:43:34.178217 | debian-bookworm | +space_left = 12361 2026-06-02 07:43:34.178390 | debian-bookworm | +space_left_action = email 2026-06-02 07:43:34.178560 | debian-bookworm | +verify_email = yes 2026-06-02 07:43:34.178734 | debian-bookworm | +action_mail_acct = root 2026-06-02 07:43:34.178919 | debian-bookworm | +admin_space_left = 50 2026-06-02 07:43:34.179094 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 07:43:34.179287 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 07:43:34.179456 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 07:43:34.179630 | debian-bookworm | +use_libwrap = yes 2026-06-02 07:43:34.179798 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 07:43:34.180009 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 07:43:34.180177 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 07:43:34.180353 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 07:43:34.180511 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 07:43:34.180669 | debian-bookworm | +enable_krb5 = no 2026-06-02 07:43:34.180827 | debian-bookworm | +krb5_principal = auditd 2026-06-02 07:43:34.181001 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 07:43:34.181163 | debian-bookworm | +distribute_network = no 2026-06-02 07:43:34.181363 | debian-bookworm | 2026-06-02 07:43:34.181556 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780386213.0054724-2452-31304404437779/.source.conf", "state": "file", "uid": 0} 2026-06-02 07:43:34.181694 | debian-bookworm | 2026-06-02 07:43:34.181928 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 07:43:34.587329 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 07:43:34.587407 | debian-bookworm | 2026-06-02 07:43:34.587420 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 07:43:35.401205 | debian-bookworm | --- before 2026-06-02 07:43:35.401457 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2082ygq24vlk/tmp9kezb5c4/20-neo23x0.rules.j2 2026-06-02 07:43:35.405360 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 07:43:35.405417 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 07:43:35.405427 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 07:43:35.405433 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 07:43:35.405440 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 07:43:35.405446 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 07:43:35.405453 | debian-bookworm | +# 2026-06-02 07:43:35.405461 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 07:43:35.405468 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 07:43:35.405475 | debian-bookworm | +# 2026-06-02 07:43:35.405481 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 07:43:35.405487 | debian-bookworm | +# 2026-06-02 07:43:35.405494 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 07:43:35.405517 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 07:43:35.405523 | debian-bookworm | +# 2026-06-02 07:43:35.405530 | debian-bookworm | +# Based on rules published here: 2026-06-02 07:43:35.405536 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 07:43:35.405543 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 07:43:35.405549 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 07:43:35.405601 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 07:43:35.405942 | debian-bookworm | +# Linux audit repo 2026-06-02 07:43:35.406229 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 07:43:35.406477 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 07:43:35.406709 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 07:43:35.406894 | debian-bookworm | +# 2026-06-02 07:43:35.407059 | debian-bookworm | +# Further rules 2026-06-02 07:43:35.407283 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 07:43:35.407525 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 07:43:35.407742 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 07:43:35.407989 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 07:43:35.408151 | debian-bookworm | + 2026-06-02 07:43:35.408316 | debian-bookworm | +# Remove any existing rules 2026-06-02 07:43:35.408474 | debian-bookworm | +-D 2026-06-02 07:43:35.408631 | debian-bookworm | + 2026-06-02 07:43:35.408790 | debian-bookworm | +# Buffer Size 2026-06-02 07:43:35.408972 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 07:43:35.409132 | debian-bookworm | +-b 8192 2026-06-02 07:43:35.409348 | debian-bookworm | + 2026-06-02 07:43:35.409521 | debian-bookworm | +# Failure Mode 2026-06-02 07:43:35.409689 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 07:43:35.409894 | debian-bookworm | +-f 1 2026-06-02 07:43:35.410059 | debian-bookworm | + 2026-06-02 07:43:35.410201 | debian-bookworm | +# Ignore errors 2026-06-02 07:43:35.410346 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 07:43:35.410487 | debian-bookworm | +-i 2026-06-02 07:43:35.410627 | debian-bookworm | + 2026-06-02 07:43:35.410771 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 07:43:35.410930 | debian-bookworm | + 2026-06-02 07:43:35.411073 | debian-bookworm | +## Audit the audit logs 2026-06-02 07:43:35.411217 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 07:43:35.411360 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 07:43:35.411501 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 07:43:35.411638 | debian-bookworm | + 2026-06-02 07:43:35.411779 | debian-bookworm | +## Auditd configuration 2026-06-02 07:43:35.411938 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 07:43:35.412084 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 07:43:35.412234 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 07:43:35.412376 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 07:43:35.412515 | debian-bookworm | + 2026-06-02 07:43:35.412658 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 07:43:35.412801 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 07:43:35.412957 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 07:43:35.413097 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 07:43:35.413237 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 07:43:35.413414 | debian-bookworm | + 2026-06-02 07:43:35.413561 | debian-bookworm | +## Access to all audit trails 2026-06-02 07:43:35.413699 | debian-bookworm | + 2026-06-02 07:43:35.413885 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 07:43:35.414033 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 07:43:35.414166 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 07:43:35.414301 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 07:43:35.414433 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 07:43:35.414562 | debian-bookworm | + 2026-06-02 07:43:35.414697 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 07:43:35.414843 | debian-bookworm | + 2026-06-02 07:43:35.414997 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 07:43:35.415127 | debian-bookworm | + 2026-06-02 07:43:35.415264 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 07:43:35.415399 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 07:43:35.415529 | debian-bookworm | + 2026-06-02 07:43:35.415664 | debian-bookworm | +## Ignore current working directory records 2026-06-02 07:43:35.415801 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 07:43:35.415952 | debian-bookworm | + 2026-06-02 07:43:35.416092 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 07:43:35.416228 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 07:43:35.416364 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 07:43:35.416493 | debian-bookworm | + 2026-06-02 07:43:35.416629 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 07:43:35.416764 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 07:43:35.416937 | debian-bookworm | + 2026-06-02 07:43:35.417073 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 07:43:35.417199 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 07:43:35.417343 | debian-bookworm | + 2026-06-02 07:43:35.417471 | debian-bookworm | +## Open VM Tools 2026-06-02 07:43:35.417597 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 07:43:35.417715 | debian-bookworm | + 2026-06-02 07:43:35.417852 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 07:43:35.417979 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 07:43:35.418103 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 07:43:35.418222 | debian-bookworm | + 2026-06-02 07:43:35.418342 | debian-bookworm | +## FileBeat 2026-06-02 07:43:35.418465 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 07:43:35.418581 | debian-bookworm | + 2026-06-02 07:43:35.418702 | debian-bookworm | +## More information on how to filter events 2026-06-02 07:43:35.418865 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 07:43:35.418991 | debian-bookworm | + 2026-06-02 07:43:35.419103 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 07:43:35.419213 | debian-bookworm | + 2026-06-02 07:43:35.419323 | debian-bookworm | +## Kernel parameters 2026-06-02 07:43:35.419435 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 07:43:35.419547 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 07:43:35.419653 | debian-bookworm | + 2026-06-02 07:43:35.419764 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 07:43:35.419895 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 07:43:35.420009 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 07:43:35.420119 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 07:43:35.420232 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 07:43:35.420338 | debian-bookworm | + 2026-06-02 07:43:35.420445 | debian-bookworm | +## Modprobe configuration 2026-06-02 07:43:35.420555 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 07:43:35.420665 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 07:43:35.420771 | debian-bookworm | + 2026-06-02 07:43:35.420893 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 07:43:35.421006 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 07:43:35.421114 | debian-bookworm | + 2026-06-02 07:43:35.421224 | debian-bookworm | +## Special files 2026-06-02 07:43:35.421367 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 07:43:35.421478 | debian-bookworm | + 2026-06-02 07:43:35.421592 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 07:43:35.421705 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 07:43:35.421812 | debian-bookworm | + 2026-06-02 07:43:35.421935 | debian-bookworm | +### NFS mount 2026-06-02 07:43:35.422062 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.422187 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.422297 | debian-bookworm | + 2026-06-02 07:43:35.422409 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 07:43:35.422522 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 07:43:35.422640 | debian-bookworm | + 2026-06-02 07:43:35.422748 | debian-bookworm | +## Time 2026-06-02 07:43:35.422906 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 07:43:35.423021 | debian-bookworm | +### Local time zone 2026-06-02 07:43:35.423142 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 07:43:35.423251 | debian-bookworm | + 2026-06-02 07:43:35.423361 | debian-bookworm | +## Stunnel 2026-06-02 07:43:35.423472 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 07:43:35.423583 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 07:43:35.423691 | debian-bookworm | + 2026-06-02 07:43:35.423802 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 07:43:35.423928 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 07:43:35.424040 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 07:43:35.424152 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 07:43:35.424263 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 07:43:35.424375 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 07:43:35.424486 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 07:43:35.424595 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 07:43:35.424706 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 07:43:35.424817 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 07:43:35.424941 | debian-bookworm | + 2026-06-02 07:43:35.425060 | debian-bookworm | +## User, group, password databases 2026-06-02 07:43:35.425172 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 07:43:35.425303 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 07:43:35.425420 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 07:43:35.425532 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 07:43:35.425644 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 07:43:35.425753 | debian-bookworm | + 2026-06-02 07:43:35.425899 | debian-bookworm | +## Sudoers file changes 2026-06-02 07:43:35.426014 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 07:43:35.426124 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 07:43:35.426235 | debian-bookworm | + 2026-06-02 07:43:35.426348 | debian-bookworm | +## Passwd 2026-06-02 07:43:35.426461 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 07:43:35.426572 | debian-bookworm | + 2026-06-02 07:43:35.426686 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 07:43:35.426800 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 07:43:35.426927 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 07:43:35.427042 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 07:43:35.427156 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 07:43:35.427267 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 07:43:35.427382 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 07:43:35.427495 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 07:43:35.427605 | debian-bookworm | + 2026-06-02 07:43:35.427719 | debian-bookworm | +## Login configuration and information 2026-06-02 07:43:35.427864 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 07:43:35.427987 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 07:43:35.428099 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 07:43:35.428209 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 07:43:35.428326 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 07:43:35.428439 | debian-bookworm | + 2026-06-02 07:43:35.428548 | debian-bookworm | +## Network Environment 2026-06-02 07:43:35.428659 | debian-bookworm | +### Changes to hostname 2026-06-02 07:43:35.428772 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 07:43:35.428896 | debian-bookworm | + 2026-06-02 07:43:35.429006 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 07:43:35.429122 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 07:43:35.429236 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 07:43:35.429375 | debian-bookworm | + 2026-06-02 07:43:35.429492 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 07:43:35.429605 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 07:43:35.429713 | debian-bookworm | + 2026-06-02 07:43:35.429861 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 07:43:35.429985 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 07:43:35.430096 | debian-bookworm | + 2026-06-02 07:43:35.430229 | debian-bookworm | +### Changes to other files 2026-06-02 07:43:35.430345 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 07:43:35.430461 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 07:43:35.430575 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 07:43:35.430687 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 07:43:35.430804 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 07:43:35.430928 | debian-bookworm | + 2026-06-02 07:43:35.431040 | debian-bookworm | +### Changes to issue 2026-06-02 07:43:35.431155 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 07:43:35.431268 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 07:43:35.431378 | debian-bookworm | + 2026-06-02 07:43:35.431487 | debian-bookworm | +## System startup scripts 2026-06-02 07:43:35.431601 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 07:43:35.431712 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 07:43:35.431839 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 07:43:35.431951 | debian-bookworm | + 2026-06-02 07:43:35.432064 | debian-bookworm | +## Library search paths 2026-06-02 07:43:35.432178 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 07:43:35.432291 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 07:43:35.432402 | debian-bookworm | + 2026-06-02 07:43:35.432521 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 07:43:35.432637 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 07:43:35.432749 | debian-bookworm | + 2026-06-02 07:43:35.432872 | debian-bookworm | +## Pam configuration 2026-06-02 07:43:35.432983 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 07:43:35.433095 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 07:43:35.433207 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 07:43:35.433338 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 07:43:35.433453 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 07:43:35.433566 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 07:43:35.433687 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 07:43:35.433796 | debian-bookworm | + 2026-06-02 07:43:35.433948 | debian-bookworm | +## Mail configuration 2026-06-02 07:43:35.434066 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 07:43:35.434182 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 07:43:35.434294 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 07:43:35.434405 | debian-bookworm | + 2026-06-02 07:43:35.434516 | debian-bookworm | +## SSH configuration 2026-06-02 07:43:35.434628 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 07:43:35.434741 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 07:43:35.434862 | debian-bookworm | + 2026-06-02 07:43:35.434975 | debian-bookworm | +## root ssh key tampering 2026-06-02 07:43:35.435086 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 07:43:35.435194 | debian-bookworm | + 2026-06-02 07:43:35.435307 | debian-bookworm | +# Systemd 2026-06-02 07:43:35.435422 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 07:43:35.435533 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 07:43:35.435645 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 07:43:35.435754 | debian-bookworm | + 2026-06-02 07:43:35.435880 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 07:43:35.435994 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:35.436108 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:35.436221 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 07:43:35.436328 | debian-bookworm | + 2026-06-02 07:43:35.436440 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 07:43:35.436554 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 07:43:35.436666 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:35.436773 | debian-bookworm | + 2026-06-02 07:43:35.436897 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 07:43:35.437009 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 07:43:35.437117 | debian-bookworm | + 2026-06-02 07:43:35.437229 | debian-bookworm | +## Critical elements access failures 2026-06-02 07:43:35.437388 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.437512 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.437625 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.437747 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.437899 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.438017 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.438129 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.438245 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 07:43:35.438359 | debian-bookworm | + 2026-06-02 07:43:35.438472 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 07:43:35.438585 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 07:43:35.438698 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 07:43:35.438807 | debian-bookworm | + 2026-06-02 07:43:35.438936 | debian-bookworm | +## Power state 2026-06-02 07:43:35.439046 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 07:43:35.439157 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 07:43:35.439268 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 07:43:35.439378 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 07:43:35.439485 | debian-bookworm | + 2026-06-02 07:43:35.439595 | debian-bookworm | +## Session initiation information 2026-06-02 07:43:35.439705 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 07:43:35.439814 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 07:43:35.439941 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 07:43:35.440052 | debian-bookworm | + 2026-06-02 07:43:35.440165 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 07:43:35.440279 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.440393 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.440506 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.440617 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.440739 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.440890 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441007 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441123 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441235 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441371 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441484 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441597 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441711 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:35.441916 | debian-bookworm | + 2026-06-02 07:43:35.442051 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 07:43:35.442160 | debian-bookworm | + 2026-06-02 07:43:35.442271 | debian-bookworm | +## Reconnaissance 2026-06-02 07:43:35.442384 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 07:43:35.442497 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 07:43:35.442611 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 07:43:35.442722 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 07:43:35.442847 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 07:43:35.442960 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 07:43:35.443067 | debian-bookworm | + 2026-06-02 07:43:35.443177 | debian-bookworm | +## Suspicious activity 2026-06-02 07:43:35.443290 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 07:43:35.443403 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 07:43:35.443513 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 07:43:35.443623 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 07:43:35.443732 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 07:43:35.443871 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 07:43:35.443982 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 07:43:35.444104 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 07:43:35.444218 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 07:43:35.444331 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 07:43:35.444443 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 07:43:35.444554 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 07:43:35.444667 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 07:43:35.444778 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 07:43:35.444933 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 07:43:35.445050 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 07:43:35.445161 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 07:43:35.445274 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 07:43:35.445422 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 07:43:35.445536 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 07:43:35.445647 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 07:43:35.445757 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 07:43:35.445882 | debian-bookworm | + 2026-06-02 07:43:35.445993 | debian-bookworm | +## sssd 2026-06-02 07:43:35.446111 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.446226 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.446340 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.446455 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.446567 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.446676 | debian-bookworm | + 2026-06-02 07:43:35.446786 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 07:43:35.446907 | debian-bookworm | + 2026-06-02 07:43:35.447019 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 07:43:35.447131 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 07:43:35.447243 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 07:43:35.447355 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 07:43:35.447462 | debian-bookworm | + 2026-06-02 07:43:35.447572 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 07:43:35.447685 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 07:43:35.447792 | debian-bookworm | + 2026-06-02 07:43:35.447923 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 07:43:35.448036 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 07:43:35.448145 | debian-bookworm | + 2026-06-02 07:43:35.448256 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 07:43:35.448369 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 07:43:35.448477 | debian-bookworm | + 2026-06-02 07:43:35.448586 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 07:43:35.448696 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 07:43:35.448803 | debian-bookworm | + 2026-06-02 07:43:35.448953 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 07:43:35.449068 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 07:43:35.449175 | debian-bookworm | + 2026-06-02 07:43:35.449316 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 07:43:35.449462 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 07:43:35.449572 | debian-bookworm | + 2026-06-02 07:43:35.449689 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 07:43:35.449802 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 07:43:35.449931 | debian-bookworm | + 2026-06-02 07:43:35.450049 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 07:43:35.450166 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 07:43:35.450276 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 07:43:35.450388 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 07:43:35.450495 | debian-bookworm | + 2026-06-02 07:43:35.450608 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 07:43:35.450718 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 07:43:35.450849 | debian-bookworm | + 2026-06-02 07:43:35.450962 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 07:43:35.451075 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 07:43:35.451185 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 07:43:35.451294 | debian-bookworm | + 2026-06-02 07:43:35.451405 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 07:43:35.451516 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 07:43:35.451626 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 07:43:35.451736 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 07:43:35.451878 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 07:43:35.451993 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 07:43:35.452111 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 07:43:35.452221 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 07:43:35.452332 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 07:43:35.452442 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 07:43:35.452551 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 07:43:35.452658 | debian-bookworm | + 2026-06-02 07:43:35.452768 | debian-bookworm | +### kde4 2026-06-02 07:43:35.452900 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.453016 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:35.453124 | debian-bookworm | + 2026-06-02 07:43:35.453235 | debian-bookworm | +## dbus-send invocation 2026-06-02 07:43:35.453391 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 07:43:35.453505 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 07:43:35.453619 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 07:43:35.453726 | debian-bookworm | + 2026-06-02 07:43:35.453876 | debian-bookworm | +## pkexec invocation 2026-06-02 07:43:35.453997 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 07:43:35.454107 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 07:43:35.454216 | debian-bookworm | + 2026-06-02 07:43:35.454328 | debian-bookworm | +## Suspicious shells 2026-06-02 07:43:35.454441 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 07:43:35.454551 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 07:43:35.454662 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 07:43:35.454779 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 07:43:35.454902 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 07:43:35.455012 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 07:43:35.455122 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 07:43:35.455231 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 07:43:35.455340 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 07:43:35.455446 | debian-bookworm | + 2026-06-02 07:43:35.455558 | debian-bookworm | +# Web Server Actvity 2026-06-02 07:43:35.455673 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 07:43:35.455789 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 07:43:35.455912 | debian-bookworm | + 2026-06-02 07:43:35.456023 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 07:43:35.456135 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 07:43:35.456245 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 07:43:35.456354 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 07:43:35.456462 | debian-bookworm | + 2026-06-02 07:43:35.456572 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 07:43:35.456682 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 07:43:35.456792 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 07:43:35.456935 | debian-bookworm | + 2026-06-02 07:43:35.457057 | debian-bookworm | +## Shell/profile configurations 2026-06-02 07:43:35.457168 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 07:43:35.457301 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 07:43:35.457424 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 07:43:35.457551 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 07:43:35.457664 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 07:43:35.457776 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 07:43:35.457902 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 07:43:35.458014 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 07:43:35.458133 | debian-bookworm | + 2026-06-02 07:43:35.458244 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 07:43:35.458354 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 07:43:35.458467 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 07:43:35.458577 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 07:43:35.458687 | debian-bookworm | + 2026-06-02 07:43:35.458797 | debian-bookworm | +## Injection 2026-06-02 07:43:35.458926 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 07:43:35.459040 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 07:43:35.459152 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 07:43:35.459262 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 07:43:35.459375 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 07:43:35.459485 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 07:43:35.459592 | debian-bookworm | + 2026-06-02 07:43:35.459702 | debian-bookworm | +## Anonymous File Creation 2026-06-02 07:43:35.459814 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 07:43:35.459960 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 07:43:35.460087 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 07:43:35.460202 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 07:43:35.460310 | debian-bookworm | + 2026-06-02 07:43:35.460420 | debian-bookworm | +## Privilege Abuse 2026-06-02 07:43:35.460535 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 07:43:35.460660 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 07:43:35.460771 | debian-bookworm | + 2026-06-02 07:43:35.460896 | debian-bookworm | +# Socket Creations 2026-06-02 07:43:35.461010 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 07:43:35.461118 | debian-bookworm | + 2026-06-02 07:43:35.461232 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 07:43:35.461381 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 07:43:35.461493 | debian-bookworm | + 2026-06-02 07:43:35.461607 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 07:43:35.461719 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 07:43:35.461856 | debian-bookworm | + 2026-06-02 07:43:35.461975 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 07:43:35.462085 | debian-bookworm | + 2026-06-02 07:43:35.462196 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 07:43:35.462308 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 07:43:35.462420 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 07:43:35.462531 | debian-bookworm | + 2026-06-02 07:43:35.462651 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 07:43:35.462764 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 07:43:35.462887 | debian-bookworm | + 2026-06-02 07:43:35.463002 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 07:43:35.463115 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 07:43:35.463226 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 07:43:35.463338 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 07:43:35.463458 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 07:43:35.463567 | debian-bookworm | + 2026-06-02 07:43:35.463678 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 07:43:35.463789 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 07:43:35.463916 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 07:43:35.464037 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 07:43:35.464149 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 07:43:35.464262 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 07:43:35.464372 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 07:43:35.464487 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 07:43:35.464599 | debian-bookworm | + 2026-06-02 07:43:35.464711 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 07:43:35.464850 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 07:43:35.464973 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 07:43:35.465098 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 07:43:35.465211 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 07:43:35.465348 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 07:43:35.465464 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 07:43:35.465573 | debian-bookworm | + 2026-06-02 07:43:35.465684 | debian-bookworm | +# npm 2026-06-02 07:43:35.465799 | debian-bookworm | +## T1072 third party software 2026-06-02 07:43:35.465939 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 07:43:35.466056 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 07:43:35.466170 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 07:43:35.466278 | debian-bookworm | + 2026-06-02 07:43:35.466392 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 07:43:35.466503 | debian-bookworm | +## T1072 third party software 2026-06-02 07:43:35.466612 | debian-bookworm | +## https://www.cpan.org 2026-06-02 07:43:35.466728 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 07:43:35.466848 | debian-bookworm | + 2026-06-02 07:43:35.466962 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 07:43:35.467073 | debian-bookworm | +## T1072 third party software 2026-06-02 07:43:35.467186 | debian-bookworm | +## https://rubygems.org 2026-06-02 07:43:35.467299 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 07:43:35.467407 | debian-bookworm | + 2026-06-02 07:43:35.467518 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 07:43:35.467626 | debian-bookworm | +## T1072 third party software 2026-06-02 07:43:35.467735 | debian-bookworm | +## https://luarocks.org 2026-06-02 07:43:35.467883 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 07:43:35.468000 | debian-bookworm | + 2026-06-02 07:43:35.468111 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 07:43:35.468224 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 07:43:35.468335 | debian-bookworm | +## T1072 third party software 2026-06-02 07:43:35.468448 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 07:43:35.468561 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 07:43:35.468671 | debian-bookworm | + 2026-06-02 07:43:35.468783 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 07:43:35.468908 | debian-bookworm | + 2026-06-02 07:43:35.469019 | debian-bookworm | +## GDS specific secrets 2026-06-02 07:43:35.469132 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 07:43:35.469240 | debian-bookworm | + 2026-06-02 07:43:35.469384 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 07:43:35.469501 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 07:43:35.469614 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 07:43:35.469722 | debian-bookworm | + 2026-06-02 07:43:35.469845 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 07:43:35.469955 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 07:43:35.470060 | debian-bookworm | + 2026-06-02 07:43:35.470170 | debian-bookworm | +## Salt 2026-06-02 07:43:35.470282 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 07:43:35.470398 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 07:43:35.470510 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 07:43:35.470620 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 07:43:35.470726 | debian-bookworm | + 2026-06-02 07:43:35.470865 | debian-bookworm | +## Otter 2026-06-02 07:43:35.470981 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 07:43:35.471092 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 07:43:35.471199 | debian-bookworm | + 2026-06-02 07:43:35.471311 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 07:43:35.471424 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 07:43:35.471535 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 07:43:35.471646 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 07:43:35.471754 | debian-bookworm | +### macOS 2026-06-02 07:43:35.471879 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 07:43:35.471991 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 07:43:35.472107 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 07:43:35.472216 | debian-bookworm | + 2026-06-02 07:43:35.472326 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 07:43:35.472438 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 07:43:35.472547 | debian-bookworm | +### macOS 2026-06-02 07:43:35.472657 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 07:43:35.472773 | debian-bookworm | + 2026-06-02 07:43:35.472920 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 07:43:35.473033 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 07:43:35.473141 | debian-bookworm | +### macOS 2026-06-02 07:43:35.473252 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 07:43:35.473386 | debian-bookworm | + 2026-06-02 07:43:35.473501 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 07:43:35.473610 | debian-bookworm | + 2026-06-02 07:43:35.473720 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 07:43:35.473843 | debian-bookworm | +### macOS 2026-06-02 07:43:35.473956 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 07:43:35.474064 | debian-bookworm | + 2026-06-02 07:43:35.474176 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 07:43:35.474287 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 07:43:35.474397 | debian-bookworm | +### macOS 2026-06-02 07:43:35.474510 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 07:43:35.474619 | debian-bookworm | + 2026-06-02 07:43:35.474731 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 07:43:35.474873 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 07:43:35.474989 | debian-bookworm | +### macOS 2026-06-02 07:43:35.475101 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 07:43:35.475210 | debian-bookworm | + 2026-06-02 07:43:35.475323 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 07:43:35.475433 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 07:43:35.475543 | debian-bookworm | +### macOS 2026-06-02 07:43:35.475655 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 07:43:35.475764 | debian-bookworm | + 2026-06-02 07:43:35.475895 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 07:43:35.476008 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 07:43:35.476118 | debian-bookworm | +### macOS 2026-06-02 07:43:35.476230 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 07:43:35.476337 | debian-bookworm | + 2026-06-02 07:43:35.476449 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 07:43:35.476559 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 07:43:35.476670 | debian-bookworm | +### macOS 2026-06-02 07:43:35.476790 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 07:43:35.476913 | debian-bookworm | + 2026-06-02 07:43:35.477027 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 07:43:35.477141 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 07:43:35.477251 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 07:43:35.477395 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 07:43:35.477508 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 07:43:35.477616 | debian-bookworm | +### macOS 2026-06-02 07:43:35.477729 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 07:43:35.477866 | debian-bookworm | + 2026-06-02 07:43:35.477982 | debian-bookworm | +## Docker 2026-06-02 07:43:35.478093 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 07:43:35.478202 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 07:43:35.478310 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 07:43:35.478417 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 07:43:35.478526 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 07:43:35.478636 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 07:43:35.478747 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 07:43:35.478871 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 07:43:35.478983 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 07:43:35.479092 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 07:43:35.479198 | debian-bookworm | + 2026-06-02 07:43:35.479310 | debian-bookworm | +## Virtualization stuff 2026-06-02 07:43:35.479421 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 07:43:35.479531 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 07:43:35.479640 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 07:43:35.479750 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 07:43:35.479892 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 07:43:35.480009 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 07:43:35.480119 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 07:43:35.480225 | debian-bookworm | + 2026-06-02 07:43:35.480399 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 07:43:35.480511 | debian-bookworm | + 2026-06-02 07:43:35.480620 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 07:43:35.480740 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 07:43:35.480863 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 07:43:35.480974 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 07:43:35.481085 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 07:43:35.481195 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 07:43:35.481332 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 07:43:35.481446 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 07:43:35.481555 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 07:43:35.481668 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 07:43:35.481778 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 07:43:35.481905 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 07:43:35.482020 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 07:43:35.482133 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 07:43:35.482244 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 07:43:35.482355 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 07:43:35.482466 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 07:43:35.482572 | debian-bookworm | + 2026-06-02 07:43:35.482681 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 07:43:35.482787 | debian-bookworm | + 2026-06-02 07:43:35.482930 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 07:43:35.483043 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 07:43:35.483155 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 07:43:35.483265 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 07:43:35.483383 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 07:43:35.483496 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 07:43:35.483606 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 07:43:35.483721 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 07:43:35.483843 | debian-bookworm | + 2026-06-02 07:43:35.483954 | debian-bookworm | +### qemu on macOS 2026-06-02 07:43:35.484060 | debian-bookworm | + 2026-06-02 07:43:35.484171 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 07:43:35.484282 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 07:43:35.484395 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 07:43:35.484505 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 07:43:35.484620 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 07:43:35.484727 | debian-bookworm | + 2026-06-02 07:43:35.484847 | debian-bookworm | +## Kubelet 2026-06-02 07:43:35.484959 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 07:43:35.485065 | debian-bookworm | + 2026-06-02 07:43:35.485175 | debian-bookworm | +# ipc system call 2026-06-02 07:43:35.485302 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 07:43:35.485414 | debian-bookworm | + 2026-06-02 07:43:35.485530 | debian-bookworm | +## msgctl 2026-06-02 07:43:35.485646 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 07:43:35.485755 | debian-bookworm | +## msgget 2026-06-02 07:43:35.485900 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 07:43:35.486017 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:35.486133 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 07:43:35.486248 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 07:43:35.486356 | debian-bookworm | + 2026-06-02 07:43:35.486467 | debian-bookworm | +## semctl 2026-06-02 07:43:35.486579 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 07:43:35.486688 | debian-bookworm | +## semget 2026-06-02 07:43:35.486798 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 07:43:35.486923 | debian-bookworm | +## semop 2026-06-02 07:43:35.487036 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 07:43:35.487146 | debian-bookworm | +## semtimedop 2026-06-02 07:43:35.487257 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 07:43:35.487367 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:35.487491 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 07:43:35.487604 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 07:43:35.487716 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 07:43:35.487855 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 07:43:35.487969 | debian-bookworm | + 2026-06-02 07:43:35.488079 | debian-bookworm | +## shmctl 2026-06-02 07:43:35.488192 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 07:43:35.488301 | debian-bookworm | +## shmget 2026-06-02 07:43:35.488414 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 07:43:35.488524 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:35.488638 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 07:43:35.488748 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 07:43:35.488869 | debian-bookworm | + 2026-06-02 07:43:35.488981 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 07:43:35.489088 | debian-bookworm | + 2026-06-02 07:43:35.489198 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 07:43:35.489347 | debian-bookworm | + 2026-06-02 07:43:35.489462 | debian-bookworm | +## Common Shells 2026-06-02 07:43:35.489574 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 07:43:35.489685 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 07:43:35.489798 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 07:43:35.489923 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 07:43:35.490035 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 07:43:35.490143 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 07:43:35.490252 | debian-bookworm | + 2026-06-02 07:43:35.490366 | debian-bookworm | +## Root command executions 2026-06-02 07:43:35.490482 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 07:43:35.490589 | debian-bookworm | + 2026-06-02 07:43:35.490700 | debian-bookworm | +## File Deletion Events by User 2026-06-02 07:43:35.490817 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 07:43:35.490961 | debian-bookworm | + 2026-06-02 07:43:35.491071 | debian-bookworm | +## File Access 2026-06-02 07:43:35.491181 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 07:43:35.491304 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 07:43:35.491422 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 07:43:35.491529 | debian-bookworm | + 2026-06-02 07:43:35.491638 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 07:43:35.491751 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 07:43:35.491879 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 07:43:35.491988 | debian-bookworm | + 2026-06-02 07:43:35.492098 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 07:43:35.492213 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 07:43:35.492328 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 07:43:35.492434 | debian-bookworm | + 2026-06-02 07:43:35.492545 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 07:43:35.492657 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 07:43:35.492769 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 07:43:35.492893 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 07:43:35.493006 | debian-bookworm | +### bit API. 2026-06-02 07:43:35.493115 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 07:43:35.493221 | debian-bookworm | + 2026-06-02 07:43:35.493354 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 07:43:35.493474 | debian-bookworm | + 2026-06-02 07:43:35.493584 | debian-bookworm | +##-e 2 2026-06-02 07:43:35.493690 | debian-bookworm | 2026-06-02 07:43:35.494000 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780386214.6157804-2530-236382127169100/.source.rules", "state": "file", "uid": 0} 2026-06-02 07:43:35.494118 | debian-bookworm | 2026-06-02 07:43:35.494232 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 07:43:36.250226 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ActiveEnterTimestampMonotonic": "196356452", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:29 UTC", "AssertTimestampMonotonic": "196313469", "Before": "systemd-update-utmp.service shutdown.target ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "35451000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ConditionTimestampMonotonic": "196313420", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2302", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ExecMainStartTimestampMonotonic": "196335745", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2301 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2301 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2305 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2305 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:29 UTC", "InactiveExitTimestampMonotonic": "196325010", "InvocationID": "7a42943a4d8f47fb8ef342ef9db98206", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2302", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 07:43:29 UTC", "StateChangeTimestampMonotonic": "196356452", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:36.262793 | debian-bookworm | 2026-06-02 07:43:36.262878 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 07:43:36.358848 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 07:43:36.359034 | ubuntu-noble | audispd-plugins 2026-06-02 07:43:36.359165 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 07:43:36.359362 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780386117, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (561 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (561 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 07:43:36.359536 | ubuntu-noble | 2026-06-02 07:43:36.359667 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 07:43:36.674542 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007940", "end": "2026-06-02 07:43:36.627058", "msg": "", "rc": 0, "start": "2026-06-02 07:43:36.619118", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 07:43:36.674652 | debian-bookworm | 2026-06-02 07:43:36.674663 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 07:43:37.012589 | debian-bookworm | --- before 2026-06-02 07:43:37.012636 | debian-bookworm | +++ after 2026-06-02 07:43:37.012641 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 07:43:37.012646 | debian-bookworm | { 2026-06-02 07:43:37.012651 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 07:43:37.012657 | debian-bookworm | - "state": "file" 2026-06-02 07:43:37.012662 | debian-bookworm | + "state": "absent" 2026-06-02 07:43:37.012666 | debian-bookworm | } 2026-06-02 07:43:37.012670 | debian-bookworm | 2026-06-02 07:43:37.012676 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 07:43:37.012683 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 07:43:37.012694 | debian-bookworm | 2026-06-02 07:43:37.012699 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 07:43:37.694317 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ActiveEnterTimestampMonotonic": "196356452", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:29 UTC", "AssertTimestampMonotonic": "196313469", "Before": "systemd-update-utmp.service shutdown.target ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "36712000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ConditionTimestampMonotonic": "196313420", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2302", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:29 UTC", "ExecMainStartTimestampMonotonic": "196335745", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2301 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2301 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2305 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:29 UTC] ; stop_time=[Tue 2026-06-02 07:43:29 UTC] ; pid=2305 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:29 UTC", "InactiveExitTimestampMonotonic": "196325010", "InvocationID": "7a42943a4d8f47fb8ef342ef9db98206", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2302", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 07:43:29 UTC", "StateChangeTimestampMonotonic": "196356452", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:37.695852 | debian-bookworm | 2026-06-02 07:43:37.695994 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 07:43:37.643771 | ubuntu-noble | --- before 2026-06-02 07:43:37.644132 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1918r_84r2wj/tmp1lgv0_py/auditd.conf.j2 2026-06-02 07:43:37.644316 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 07:43:37.644598 | ubuntu-noble | +# 2026-06-02 07:43:37.644765 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 07:43:37.646373 | ubuntu-noble | +# 2026-06-02 07:43:37.646404 | ubuntu-noble | + 2026-06-02 07:43:37.646413 | ubuntu-noble | +local_events = yes 2026-06-02 07:43:37.646420 | ubuntu-noble | +write_logs = yes 2026-06-02 07:43:37.646428 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 07:43:37.646436 | ubuntu-noble | +log_group = adm 2026-06-02 07:43:37.646443 | ubuntu-noble | +log_format = RAW 2026-06-02 07:43:37.646450 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 07:43:37.646481 | ubuntu-noble | +freq = 50 2026-06-02 07:43:37.646489 | ubuntu-noble | +max_log_file = 8 2026-06-02 07:43:37.646497 | ubuntu-noble | +num_logs = 5 2026-06-02 07:43:37.646587 | ubuntu-noble | +priority_boost = 4 2026-06-02 07:43:37.646838 | ubuntu-noble | +disp_qos = lossy 2026-06-02 07:43:37.647070 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 07:43:37.647292 | ubuntu-noble | +name_format = NONE 2026-06-02 07:43:37.647552 | ubuntu-noble | +##name = mydomain 2026-06-02 07:43:37.647792 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 07:43:37.647966 | ubuntu-noble | +space_left = 12361 2026-06-02 07:43:37.648110 | ubuntu-noble | +space_left_action = email 2026-06-02 07:43:37.648250 | ubuntu-noble | +verify_email = yes 2026-06-02 07:43:37.648525 | ubuntu-noble | +action_mail_acct = root 2026-06-02 07:43:37.648702 | ubuntu-noble | +admin_space_left = 50 2026-06-02 07:43:37.648853 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 07:43:37.649025 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 07:43:37.649192 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 07:43:37.649361 | ubuntu-noble | +use_libwrap = yes 2026-06-02 07:43:37.649617 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 07:43:37.649802 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 07:43:37.649960 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 07:43:37.650106 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 07:43:37.650250 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 07:43:37.650415 | ubuntu-noble | +enable_krb5 = no 2026-06-02 07:43:37.650634 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 07:43:37.650828 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 07:43:37.651059 | ubuntu-noble | +distribute_network = no 2026-06-02 07:43:37.651211 | ubuntu-noble | 2026-06-02 07:43:37.651421 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780386216.3759665-2315-111228822716884/.source.conf", "state": "file", "uid": 0} 2026-06-02 07:43:37.651942 | ubuntu-noble | 2026-06-02 07:43:37.652267 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 07:43:38.115933 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.080964", "end": "2026-06-02 07:43:38.052876", "msg": "", "rc": 0, "start": "2026-06-02 07:43:37.971912", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2691\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1153\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2691\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 777\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2691", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1153", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2691", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 777", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 07:43:38.115997 | debian-bookworm | 2026-06-02 07:43:38.116082 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 07:43:38.160960 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 07:43:38.161241 | ubuntu-noble | 2026-06-02 07:43:38.162772 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 07:43:38.835611 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:37 UTC", "ActiveEnterTimestampMonotonic": "204475765", "ActiveExitTimestamp": "Tue 2026-06-02 07:43:37 UTC", "ActiveExitTimestampMonotonic": "204290035", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service system.slice local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:37 UTC", "AssertTimestampMonotonic": "204331756", "Before": "systemd-update-utmp.service shutdown.target ssh.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "173527000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:37 UTC", "ConditionTimestampMonotonic": "204331707", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3328", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2691", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:37 UTC", "ExecMainStartTimestampMonotonic": "204379017", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:37 UTC] ; stop_time=[Tue 2026-06-02 07:43:37 UTC] ; pid=2690 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:37 UTC] ; stop_time=[Tue 2026-06-02 07:43:37 UTC] ; pid=2690 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:37 UTC] ; stop_time=[Tue 2026-06-02 07:43:37 UTC] ; pid=2694 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:37 UTC] ; stop_time=[Tue 2026-06-02 07:43:37 UTC] ; pid=2694 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 07:43:37 UTC", "InactiveEnterTimestampMonotonic": "204330942", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:37 UTC", "InactiveExitTimestampMonotonic": "204349083", "InvocationID": "643c9e821af6470983d6f87e492430c5", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2691", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2068480", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 07:43:37 UTC", "StateChangeTimestampMonotonic": "204475765", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:38.837365 | debian-bookworm | 2026-06-02 07:43:38.837482 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 07:43:38.837598 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 07:43:38.837691 | debian-bookworm | 2026-06-02 07:43:38.948519 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 07:43:38.949399 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 07:43:39.085874 | ubuntu-noble | --- before 2026-06-02 07:43:39.085973 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1918r_84r2wj/tmpivb21q6k/20-neo23x0.rules.j2 2026-06-02 07:43:39.086738 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 07:43:39.086772 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 07:43:39.086782 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 07:43:39.086791 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 07:43:39.086800 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 07:43:39.086809 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 07:43:39.086818 | ubuntu-noble | +# 2026-06-02 07:43:39.086833 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 07:43:39.086902 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 07:43:39.087041 | ubuntu-noble | +# 2026-06-02 07:43:39.087092 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 07:43:39.087209 | ubuntu-noble | +# 2026-06-02 07:43:39.087288 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 07:43:39.091377 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 07:43:39.091412 | ubuntu-noble | +# 2026-06-02 07:43:39.091420 | ubuntu-noble | +# Based on rules published here: 2026-06-02 07:43:39.091427 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 07:43:39.091434 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 07:43:39.091441 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 07:43:39.091448 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 07:43:39.091738 | ubuntu-noble | +# Linux audit repo 2026-06-02 07:43:39.092051 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 07:43:39.092361 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 07:43:39.092738 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 07:43:39.092931 | ubuntu-noble | +# 2026-06-02 07:43:39.093116 | ubuntu-noble | +# Further rules 2026-06-02 07:43:39.093415 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 07:43:39.093754 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 07:43:39.093990 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 07:43:39.094232 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 07:43:39.094419 | ubuntu-noble | + 2026-06-02 07:43:39.094616 | ubuntu-noble | +# Remove any existing rules 2026-06-02 07:43:39.094776 | ubuntu-noble | +-D 2026-06-02 07:43:39.094933 | ubuntu-noble | + 2026-06-02 07:43:39.095093 | ubuntu-noble | +# Buffer Size 2026-06-02 07:43:39.095263 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 07:43:39.095451 | ubuntu-noble | +-b 8192 2026-06-02 07:43:39.095632 | ubuntu-noble | + 2026-06-02 07:43:39.095798 | ubuntu-noble | +# Failure Mode 2026-06-02 07:43:39.095972 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 07:43:39.096132 | ubuntu-noble | +-f 1 2026-06-02 07:43:39.096285 | ubuntu-noble | + 2026-06-02 07:43:39.096464 | ubuntu-noble | +# Ignore errors 2026-06-02 07:43:39.096652 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 07:43:39.096812 | ubuntu-noble | +-i 2026-06-02 07:43:39.096964 | ubuntu-noble | + 2026-06-02 07:43:39.097128 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 07:43:39.097286 | ubuntu-noble | + 2026-06-02 07:43:39.097478 | ubuntu-noble | +## Audit the audit logs 2026-06-02 07:43:39.097697 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 07:43:39.097872 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 07:43:39.098020 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 07:43:39.098154 | ubuntu-noble | + 2026-06-02 07:43:39.098297 | ubuntu-noble | +## Auditd configuration 2026-06-02 07:43:39.098466 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 07:43:39.098633 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 07:43:39.098781 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 07:43:39.098926 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 07:43:39.099063 | ubuntu-noble | + 2026-06-02 07:43:39.099208 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 07:43:39.099367 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 07:43:39.099533 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 07:43:39.099700 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 07:43:39.099846 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 07:43:39.099984 | ubuntu-noble | + 2026-06-02 07:43:39.100126 | ubuntu-noble | +## Access to all audit trails 2026-06-02 07:43:39.100261 | ubuntu-noble | + 2026-06-02 07:43:39.100429 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 07:43:39.100613 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 07:43:39.100776 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 07:43:39.100929 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 07:43:39.101078 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 07:43:39.101216 | ubuntu-noble | + 2026-06-02 07:43:39.101376 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 07:43:39.101558 | ubuntu-noble | + 2026-06-02 07:43:39.101986 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 07:43:39.102221 | ubuntu-noble | + 2026-06-02 07:43:39.102413 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 07:43:39.102585 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 07:43:39.102719 | ubuntu-noble | + 2026-06-02 07:43:39.102860 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 07:43:39.103000 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 07:43:39.103131 | ubuntu-noble | + 2026-06-02 07:43:39.103276 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 07:43:39.103432 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 07:43:39.103591 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 07:43:39.103722 | ubuntu-noble | + 2026-06-02 07:43:39.103860 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 07:43:39.104005 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 07:43:39.104135 | ubuntu-noble | + 2026-06-02 07:43:39.104279 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 07:43:39.104445 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 07:43:39.104624 | ubuntu-noble | + 2026-06-02 07:43:39.104756 | ubuntu-noble | +## Open VM Tools 2026-06-02 07:43:39.104891 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 07:43:39.105010 | ubuntu-noble | + 2026-06-02 07:43:39.105140 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 07:43:39.105266 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 07:43:39.105407 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 07:43:39.105546 | ubuntu-noble | + 2026-06-02 07:43:39.105669 | ubuntu-noble | +## FileBeat 2026-06-02 07:43:39.105797 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 07:43:39.107342 | ubuntu-noble | + 2026-06-02 07:43:39.107356 | ubuntu-noble | +## More information on how to filter events 2026-06-02 07:43:39.107360 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 07:43:39.107364 | ubuntu-noble | + 2026-06-02 07:43:39.107368 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 07:43:39.107373 | ubuntu-noble | + 2026-06-02 07:43:39.107377 | ubuntu-noble | +## Kernel parameters 2026-06-02 07:43:39.107381 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 07:43:39.107385 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 07:43:39.107389 | ubuntu-noble | + 2026-06-02 07:43:39.107393 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 07:43:39.107397 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 07:43:39.107401 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 07:43:39.107405 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 07:43:39.107455 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 07:43:39.107610 | ubuntu-noble | + 2026-06-02 07:43:39.107739 | ubuntu-noble | +## Modprobe configuration 2026-06-02 07:43:39.107867 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 07:43:39.107989 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 07:43:39.108096 | ubuntu-noble | + 2026-06-02 07:43:39.108211 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 07:43:39.108348 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 07:43:39.108479 | ubuntu-noble | + 2026-06-02 07:43:39.108604 | ubuntu-noble | +## Special files 2026-06-02 07:43:39.108724 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 07:43:39.108831 | ubuntu-noble | + 2026-06-02 07:43:39.108947 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 07:43:39.109062 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 07:43:39.109169 | ubuntu-noble | + 2026-06-02 07:43:39.109279 | ubuntu-noble | +### NFS mount 2026-06-02 07:43:39.109421 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.109594 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.109707 | ubuntu-noble | + 2026-06-02 07:43:39.109824 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 07:43:39.109943 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 07:43:39.110052 | ubuntu-noble | + 2026-06-02 07:43:39.110166 | ubuntu-noble | +## Time 2026-06-02 07:43:39.110288 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 07:43:39.110420 | ubuntu-noble | +### Local time zone 2026-06-02 07:43:39.110554 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 07:43:39.110666 | ubuntu-noble | + 2026-06-02 07:43:39.110778 | ubuntu-noble | +## Stunnel 2026-06-02 07:43:39.110892 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 07:43:39.111007 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 07:43:39.111113 | ubuntu-noble | + 2026-06-02 07:43:39.111226 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 07:43:39.111353 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 07:43:39.111471 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 07:43:39.111625 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 07:43:39.111741 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 07:43:39.111854 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 07:43:39.111965 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 07:43:39.112079 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 07:43:39.112192 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 07:43:39.112303 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 07:43:39.112426 | ubuntu-noble | + 2026-06-02 07:43:39.112561 | ubuntu-noble | +## User, group, password databases 2026-06-02 07:43:39.112676 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 07:43:39.112787 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 07:43:39.112903 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 07:43:39.113015 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 07:43:39.113128 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 07:43:39.113237 | ubuntu-noble | + 2026-06-02 07:43:39.113367 | ubuntu-noble | +## Sudoers file changes 2026-06-02 07:43:39.113488 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 07:43:39.113620 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 07:43:39.113728 | ubuntu-noble | + 2026-06-02 07:43:39.113840 | ubuntu-noble | +## Passwd 2026-06-02 07:43:39.113957 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 07:43:39.114067 | ubuntu-noble | + 2026-06-02 07:43:39.114179 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 07:43:39.114293 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 07:43:39.114423 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 07:43:39.114581 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 07:43:39.114701 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 07:43:39.114815 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 07:43:39.114927 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 07:43:39.115039 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 07:43:39.115144 | ubuntu-noble | + 2026-06-02 07:43:39.115259 | ubuntu-noble | +## Login configuration and information 2026-06-02 07:43:39.115390 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 07:43:39.115525 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 07:43:39.115641 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 07:43:39.115756 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 07:43:39.115870 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 07:43:39.115982 | ubuntu-noble | + 2026-06-02 07:43:39.116098 | ubuntu-noble | +## Network Environment 2026-06-02 07:43:39.116212 | ubuntu-noble | +### Changes to hostname 2026-06-02 07:43:39.116381 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 07:43:39.116507 | ubuntu-noble | + 2026-06-02 07:43:39.116622 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 07:43:39.116754 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 07:43:39.117692 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 07:43:39.117866 | ubuntu-noble | + 2026-06-02 07:43:39.117991 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 07:43:39.118102 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 07:43:39.118254 | ubuntu-noble | + 2026-06-02 07:43:39.118382 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 07:43:39.118776 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 07:43:39.118785 | ubuntu-noble | + 2026-06-02 07:43:39.118789 | ubuntu-noble | +### Changes to other files 2026-06-02 07:43:39.118795 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 07:43:39.118966 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 07:43:39.118990 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 07:43:39.119084 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 07:43:39.119485 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 07:43:39.119585 | ubuntu-noble | + 2026-06-02 07:43:39.119685 | ubuntu-noble | +### Changes to issue 2026-06-02 07:43:39.119785 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 07:43:39.119889 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 07:43:39.119979 | ubuntu-noble | + 2026-06-02 07:43:39.120085 | ubuntu-noble | +## System startup scripts 2026-06-02 07:43:39.120177 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 07:43:39.120274 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 07:43:39.120396 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 07:43:39.120488 | ubuntu-noble | + 2026-06-02 07:43:39.120621 | ubuntu-noble | +## Library search paths 2026-06-02 07:43:39.120722 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 07:43:39.120821 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 07:43:39.120915 | ubuntu-noble | + 2026-06-02 07:43:39.121016 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 07:43:39.121118 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 07:43:39.121212 | ubuntu-noble | + 2026-06-02 07:43:39.121311 | ubuntu-noble | +## Pam configuration 2026-06-02 07:43:39.122002 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 07:43:39.122024 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 07:43:39.122028 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 07:43:39.122031 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 07:43:39.122035 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 07:43:39.122039 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 07:43:39.122045 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 07:43:39.122137 | ubuntu-noble | + 2026-06-02 07:43:39.122854 | ubuntu-noble | +## Mail configuration 2026-06-02 07:43:39.122879 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 07:43:39.122883 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 07:43:39.122886 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 07:43:39.122890 | ubuntu-noble | + 2026-06-02 07:43:39.122894 | ubuntu-noble | +## SSH configuration 2026-06-02 07:43:39.122900 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 07:43:39.122977 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 07:43:39.123065 | ubuntu-noble | + 2026-06-02 07:43:39.123164 | ubuntu-noble | +## root ssh key tampering 2026-06-02 07:43:39.123260 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 07:43:39.123382 | ubuntu-noble | + 2026-06-02 07:43:39.123478 | ubuntu-noble | +# Systemd 2026-06-02 07:43:39.123618 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 07:43:39.123715 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 07:43:39.123815 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 07:43:39.123908 | ubuntu-noble | + 2026-06-02 07:43:39.124014 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 07:43:39.124120 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:39.124218 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:39.124352 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 07:43:39.124443 | ubuntu-noble | + 2026-06-02 07:43:39.124559 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 07:43:39.125110 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 07:43:39.126371 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 07:43:39.126394 | ubuntu-noble | + 2026-06-02 07:43:39.126398 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 07:43:39.126402 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 07:43:39.126406 | ubuntu-noble | + 2026-06-02 07:43:39.126410 | ubuntu-noble | +## Critical elements access failures 2026-06-02 07:43:39.126414 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126418 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126422 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126426 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126432 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126521 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126850 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.126994 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 07:43:39.127111 | ubuntu-noble | + 2026-06-02 07:43:39.127207 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 07:43:39.127302 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 07:43:39.127442 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 07:43:39.128373 | ubuntu-noble | + 2026-06-02 07:43:39.128399 | ubuntu-noble | +## Power state 2026-06-02 07:43:39.128404 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 07:43:39.128409 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 07:43:39.128413 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 07:43:39.128417 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 07:43:39.128421 | ubuntu-noble | + 2026-06-02 07:43:39.128425 | ubuntu-noble | +## Session initiation information 2026-06-02 07:43:39.128429 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 07:43:39.128459 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 07:43:39.128572 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 07:43:39.128671 | ubuntu-noble | + 2026-06-02 07:43:39.128773 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 07:43:39.128873 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129011 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129122 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129221 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129374 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129469 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129577 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129688 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129785 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.129888 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.130354 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.130427 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.130544 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 07:43:39.131287 | ubuntu-noble | + 2026-06-02 07:43:39.131316 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 07:43:39.131390 | ubuntu-noble | + 2026-06-02 07:43:39.131410 | ubuntu-noble | +## Reconnaissance 2026-06-02 07:43:39.131415 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 07:43:39.131418 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 07:43:39.131422 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 07:43:39.131429 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 07:43:39.131463 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 07:43:39.131603 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 07:43:39.131696 | ubuntu-noble | + 2026-06-02 07:43:39.131796 | ubuntu-noble | +## Suspicious activity 2026-06-02 07:43:39.131897 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 07:43:39.131994 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 07:43:39.132094 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 07:43:39.132229 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 07:43:39.132358 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 07:43:39.132446 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 07:43:39.132555 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 07:43:39.132654 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 07:43:39.132754 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 07:43:39.132859 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 07:43:39.132955 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 07:43:39.133052 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 07:43:39.133279 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 07:43:39.133414 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 07:43:39.133560 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 07:43:39.133661 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 07:43:39.133763 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 07:43:39.133866 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 07:43:39.133968 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 07:43:39.134066 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 07:43:39.134165 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 07:43:39.134300 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 07:43:39.134418 | ubuntu-noble | + 2026-06-02 07:43:39.134529 | ubuntu-noble | +## sssd 2026-06-02 07:43:39.134636 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.134745 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.134853 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.134956 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.135061 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.135154 | ubuntu-noble | + 2026-06-02 07:43:39.135253 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 07:43:39.135409 | ubuntu-noble | + 2026-06-02 07:43:39.135514 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 07:43:39.135613 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 07:43:39.135710 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 07:43:39.135810 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 07:43:39.135904 | ubuntu-noble | + 2026-06-02 07:43:39.136005 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 07:43:39.136107 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 07:43:39.136200 | ubuntu-noble | + 2026-06-02 07:43:39.136302 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 07:43:39.136449 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 07:43:39.136572 | ubuntu-noble | + 2026-06-02 07:43:39.136676 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 07:43:39.136778 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 07:43:39.136868 | ubuntu-noble | + 2026-06-02 07:43:39.136967 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 07:43:39.137069 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 07:43:39.137161 | ubuntu-noble | + 2026-06-02 07:43:39.137261 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 07:43:39.137379 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 07:43:39.137468 | ubuntu-noble | + 2026-06-02 07:43:39.137625 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 07:43:39.137730 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 07:43:39.137820 | ubuntu-noble | + 2026-06-02 07:43:39.137920 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 07:43:39.138357 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 07:43:39.138370 | ubuntu-noble | + 2026-06-02 07:43:39.138374 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 07:43:39.138378 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 07:43:39.138415 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 07:43:39.138545 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 07:43:39.138672 | ubuntu-noble | + 2026-06-02 07:43:39.138774 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 07:43:39.138875 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 07:43:39.138965 | ubuntu-noble | + 2026-06-02 07:43:39.139067 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 07:43:39.139169 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 07:43:39.139269 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 07:43:39.139377 | ubuntu-noble | + 2026-06-02 07:43:39.139479 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 07:43:39.139595 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 07:43:39.139725 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 07:43:39.139825 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 07:43:39.139925 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 07:43:39.140029 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 07:43:39.140129 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 07:43:39.140228 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 07:43:39.140343 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 07:43:39.140443 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 07:43:39.140555 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 07:43:39.140649 | ubuntu-noble | + 2026-06-02 07:43:39.140779 | ubuntu-noble | +### kde4 2026-06-02 07:43:39.140893 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.141000 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 07:43:39.141093 | ubuntu-noble | + 2026-06-02 07:43:39.142362 | ubuntu-noble | +## dbus-send invocation 2026-06-02 07:43:39.142390 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 07:43:39.142394 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 07:43:39.142398 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 07:43:39.142403 | ubuntu-noble | + 2026-06-02 07:43:39.142406 | ubuntu-noble | +## pkexec invocation 2026-06-02 07:43:39.142410 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 07:43:39.142414 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 07:43:39.142417 | ubuntu-noble | + 2026-06-02 07:43:39.142421 | ubuntu-noble | +## Suspicious shells 2026-06-02 07:43:39.142424 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 07:43:39.142428 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 07:43:39.142435 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 07:43:39.142488 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 07:43:39.142613 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 07:43:39.142710 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 07:43:39.142812 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 07:43:39.142945 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 07:43:39.143043 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 07:43:39.143135 | ubuntu-noble | + 2026-06-02 07:43:39.143231 | ubuntu-noble | +# Web Server Actvity 2026-06-02 07:43:39.143350 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 07:43:39.143457 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 07:43:39.143575 | ubuntu-noble | + 2026-06-02 07:43:39.143676 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 07:43:39.143777 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 07:43:39.143891 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 07:43:39.144026 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 07:43:39.144122 | ubuntu-noble | + 2026-06-02 07:43:39.144224 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 07:43:39.144344 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 07:43:39.144439 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 07:43:39.144559 | ubuntu-noble | + 2026-06-02 07:43:39.144661 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 07:43:39.144762 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 07:43:39.144862 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 07:43:39.144961 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 07:43:39.145090 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 07:43:39.145190 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 07:43:39.145291 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 07:43:39.145404 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 07:43:39.145542 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 07:43:39.145607 | ubuntu-noble | + 2026-06-02 07:43:39.145706 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 07:43:39.145806 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 07:43:39.145906 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 07:43:39.146007 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 07:43:39.146130 | ubuntu-noble | + 2026-06-02 07:43:39.146229 | ubuntu-noble | +## Injection 2026-06-02 07:43:39.146344 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 07:43:39.146448 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 07:43:39.146582 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 07:43:39.146686 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 07:43:39.146791 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 07:43:39.146892 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 07:43:39.146983 | ubuntu-noble | + 2026-06-02 07:43:39.147083 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 07:43:39.147214 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 07:43:39.147317 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 07:43:39.147435 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 07:43:39.147553 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 07:43:39.147646 | ubuntu-noble | + 2026-06-02 07:43:39.147744 | ubuntu-noble | +## Privilege Abuse 2026-06-02 07:43:39.147851 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 07:43:39.147954 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 07:43:39.148046 | ubuntu-noble | + 2026-06-02 07:43:39.148142 | ubuntu-noble | +# Socket Creations 2026-06-02 07:43:39.148277 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 07:43:39.148387 | ubuntu-noble | + 2026-06-02 07:43:39.148489 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 07:43:39.148601 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 07:43:39.148695 | ubuntu-noble | + 2026-06-02 07:43:39.148795 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 07:43:39.148897 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 07:43:39.148989 | ubuntu-noble | + 2026-06-02 07:43:39.149091 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 07:43:39.149185 | ubuntu-noble | + 2026-06-02 07:43:39.149282 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 07:43:39.149427 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 07:43:39.149536 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 07:43:39.149627 | ubuntu-noble | + 2026-06-02 07:43:39.149728 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 07:43:39.149828 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 07:43:39.149921 | ubuntu-noble | + 2026-06-02 07:43:39.150019 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 07:43:39.150122 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 07:43:39.150223 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 07:43:39.150340 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 07:43:39.151358 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 07:43:39.151377 | ubuntu-noble | + 2026-06-02 07:43:39.151381 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 07:43:39.151385 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 07:43:39.151389 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 07:43:39.151392 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 07:43:39.151396 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 07:43:39.151399 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 07:43:39.151403 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 07:43:39.151406 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 07:43:39.151487 | ubuntu-noble | + 2026-06-02 07:43:39.151586 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 07:43:39.151690 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 07:43:39.151793 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 07:43:39.151895 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 07:43:39.152003 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 07:43:39.152098 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 07:43:39.152201 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 07:43:39.152301 | ubuntu-noble | + 2026-06-02 07:43:39.152414 | ubuntu-noble | +# npm 2026-06-02 07:43:39.152555 | ubuntu-noble | +## T1072 third party software 2026-06-02 07:43:39.152656 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 07:43:39.152761 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 07:43:39.152864 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 07:43:39.152958 | ubuntu-noble | + 2026-06-02 07:43:39.153061 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 07:43:39.153160 | ubuntu-noble | +## T1072 third party software 2026-06-02 07:43:39.153259 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 07:43:39.153387 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 07:43:39.153480 | ubuntu-noble | + 2026-06-02 07:43:39.153645 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 07:43:39.153747 | ubuntu-noble | +## T1072 third party software 2026-06-02 07:43:39.153846 | ubuntu-noble | +## https://rubygems.org 2026-06-02 07:43:39.153949 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 07:43:39.154041 | ubuntu-noble | + 2026-06-02 07:43:39.154139 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 07:43:39.154238 | ubuntu-noble | +## T1072 third party software 2026-06-02 07:43:39.154349 | ubuntu-noble | +## https://luarocks.org 2026-06-02 07:43:39.154455 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 07:43:39.154564 | ubuntu-noble | + 2026-06-02 07:43:39.154698 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 07:43:39.154804 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 07:43:39.154906 | ubuntu-noble | +## T1072 third party software 2026-06-02 07:43:39.155010 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 07:43:39.155114 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 07:43:39.155206 | ubuntu-noble | + 2026-06-02 07:43:39.155306 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 07:43:39.155417 | ubuntu-noble | + 2026-06-02 07:43:39.155533 | ubuntu-noble | +## GDS specific secrets 2026-06-02 07:43:39.155632 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 07:43:39.155761 | ubuntu-noble | + 2026-06-02 07:43:39.155866 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 07:43:39.155973 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 07:43:39.156076 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 07:43:39.156171 | ubuntu-noble | + 2026-06-02 07:43:39.156270 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 07:43:39.156384 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 07:43:39.156479 | ubuntu-noble | + 2026-06-02 07:43:39.156591 | ubuntu-noble | +## Salt 2026-06-02 07:43:39.156690 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 07:43:39.156826 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 07:43:39.156930 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 07:43:39.157032 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 07:43:39.157125 | ubuntu-noble | + 2026-06-02 07:43:39.157223 | ubuntu-noble | +## Otter 2026-06-02 07:43:39.157335 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 07:43:39.158372 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 07:43:39.158394 | ubuntu-noble | + 2026-06-02 07:43:39.158398 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 07:43:39.158402 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 07:43:39.158406 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 07:43:39.158410 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 07:43:39.158413 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.158417 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 07:43:39.158420 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 07:43:39.158427 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 07:43:39.158468 | ubuntu-noble | + 2026-06-02 07:43:39.158582 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 07:43:39.158681 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 07:43:39.158776 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.158876 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 07:43:39.159004 | ubuntu-noble | + 2026-06-02 07:43:39.159112 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 07:43:39.159211 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 07:43:39.159306 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.159423 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 07:43:39.159525 | ubuntu-noble | + 2026-06-02 07:43:39.159625 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 07:43:39.159716 | ubuntu-noble | + 2026-06-02 07:43:39.159814 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 07:43:39.159908 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.160041 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 07:43:39.160136 | ubuntu-noble | + 2026-06-02 07:43:39.160237 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 07:43:39.160349 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 07:43:39.160446 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.160555 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 07:43:39.160645 | ubuntu-noble | + 2026-06-02 07:43:39.160743 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 07:43:39.160842 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 07:43:39.160936 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.161050 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 07:43:39.161175 | ubuntu-noble | + 2026-06-02 07:43:39.161276 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 07:43:39.161388 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 07:43:39.161486 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.161619 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 07:43:39.161711 | ubuntu-noble | + 2026-06-02 07:43:39.161813 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 07:43:39.161914 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 07:43:39.162009 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.162111 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 07:43:39.162234 | ubuntu-noble | + 2026-06-02 07:43:39.162345 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 07:43:39.162444 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 07:43:39.162554 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.162654 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 07:43:39.162745 | ubuntu-noble | + 2026-06-02 07:43:39.162845 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 07:43:39.162943 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 07:43:39.163045 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 07:43:39.163146 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 07:43:39.163275 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 07:43:39.163383 | ubuntu-noble | +### macOS 2026-06-02 07:43:39.163485 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 07:43:39.163592 | ubuntu-noble | + 2026-06-02 07:43:39.163687 | ubuntu-noble | +## Docker 2026-06-02 07:43:39.163786 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 07:43:39.163884 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 07:43:39.163981 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 07:43:39.164077 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 07:43:39.164175 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 07:43:39.164270 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 07:43:39.164412 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 07:43:39.164542 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 07:43:39.164638 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 07:43:39.164740 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 07:43:39.164832 | ubuntu-noble | + 2026-06-02 07:43:39.164931 | ubuntu-noble | +## Virtualization stuff 2026-06-02 07:43:39.165030 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 07:43:39.165128 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 07:43:39.165227 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 07:43:39.165338 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 07:43:39.167358 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 07:43:39.167382 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 07:43:39.167386 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 07:43:39.167389 | ubuntu-noble | + 2026-06-02 07:43:39.167393 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 07:43:39.167397 | ubuntu-noble | + 2026-06-02 07:43:39.167401 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 07:43:39.167405 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 07:43:39.167408 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 07:43:39.167412 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 07:43:39.167416 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 07:43:39.167419 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 07:43:39.167423 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 07:43:39.167426 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 07:43:39.167430 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 07:43:39.167434 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 07:43:39.167437 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 07:43:39.167441 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 07:43:39.167445 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 07:43:39.167449 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 07:43:39.167455 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 07:43:39.167581 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 07:43:39.167682 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 07:43:39.167773 | ubuntu-noble | + 2026-06-02 07:43:39.167872 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 07:43:39.167966 | ubuntu-noble | + 2026-06-02 07:43:39.168067 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 07:43:39.168225 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 07:43:39.168355 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 07:43:39.168450 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 07:43:39.168586 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 07:43:39.168690 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 07:43:39.168789 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 07:43:39.168889 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 07:43:39.168984 | ubuntu-noble | + 2026-06-02 07:43:39.169079 | ubuntu-noble | +### qemu on macOS 2026-06-02 07:43:39.169172 | ubuntu-noble | + 2026-06-02 07:43:39.169272 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 07:43:39.169385 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 07:43:39.169487 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 07:43:39.169643 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 07:43:39.169750 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 07:43:39.169843 | ubuntu-noble | + 2026-06-02 07:43:39.169939 | ubuntu-noble | +## Kubelet 2026-06-02 07:43:39.170037 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 07:43:39.170131 | ubuntu-noble | + 2026-06-02 07:43:39.170232 | ubuntu-noble | +# ipc system call 2026-06-02 07:43:39.170353 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 07:43:39.170443 | ubuntu-noble | + 2026-06-02 07:43:39.170550 | ubuntu-noble | +## msgctl 2026-06-02 07:43:39.170655 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 07:43:39.170780 | ubuntu-noble | +## msgget 2026-06-02 07:43:39.170892 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 07:43:39.170994 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:39.171099 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 07:43:39.171201 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 07:43:39.171294 | ubuntu-noble | + 2026-06-02 07:43:39.171409 | ubuntu-noble | +## semctl 2026-06-02 07:43:39.171537 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 07:43:39.171621 | ubuntu-noble | +## semget 2026-06-02 07:43:39.171724 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 07:43:39.171851 | ubuntu-noble | +## semop 2026-06-02 07:43:39.171966 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 07:43:39.172050 | ubuntu-noble | +## semtimedop 2026-06-02 07:43:39.172152 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 07:43:39.172253 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:39.172373 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 07:43:39.172477 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 07:43:39.172637 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 07:43:39.172742 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 07:43:39.172868 | ubuntu-noble | + 2026-06-02 07:43:39.172970 | ubuntu-noble | +## shmctl 2026-06-02 07:43:39.173075 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 07:43:39.173170 | ubuntu-noble | +## shmget 2026-06-02 07:43:39.173272 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 07:43:39.173385 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 07:43:39.173489 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 07:43:39.173601 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 07:43:39.173699 | ubuntu-noble | + 2026-06-02 07:43:39.173799 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 07:43:39.173892 | ubuntu-noble | + 2026-06-02 07:43:39.174021 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 07:43:39.174112 | ubuntu-noble | + 2026-06-02 07:43:39.174209 | ubuntu-noble | +## Common Shells 2026-06-02 07:43:39.174307 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 07:43:39.174418 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 07:43:39.174542 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 07:43:39.174649 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 07:43:39.174747 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 07:43:39.174845 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 07:43:39.174938 | ubuntu-noble | + 2026-06-02 07:43:39.175068 | ubuntu-noble | +## Root command executions 2026-06-02 07:43:39.175179 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 07:43:39.175270 | ubuntu-noble | + 2026-06-02 07:43:39.175386 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 07:43:39.175493 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 07:43:39.175601 | ubuntu-noble | + 2026-06-02 07:43:39.175696 | ubuntu-noble | +## File Access 2026-06-02 07:43:39.175796 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 07:43:39.175903 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 07:43:39.176010 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 07:43:39.176132 | ubuntu-noble | + 2026-06-02 07:43:39.176236 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 07:43:39.176350 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 07:43:39.176453 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 07:43:39.176557 | ubuntu-noble | + 2026-06-02 07:43:39.176684 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 07:43:39.176762 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 07:43:39.176864 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 07:43:39.176957 | ubuntu-noble | + 2026-06-02 07:43:39.177056 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 07:43:39.177194 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 07:43:39.177299 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 07:43:39.177414 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 07:43:39.177543 | ubuntu-noble | +### bit API. 2026-06-02 07:43:39.177648 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 07:43:39.177743 | ubuntu-noble | + 2026-06-02 07:43:39.177844 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 07:43:39.177938 | ubuntu-noble | + 2026-06-02 07:43:39.178032 | ubuntu-noble | +##-e 2 2026-06-02 07:43:39.178126 | ubuntu-noble | 2026-06-02 07:43:39.178418 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780386218.1882846-2393-92147360905496/.source.rules", "state": "file", "uid": 0} 2026-06-02 07:43:39.178521 | ubuntu-noble | 2026-06-02 07:43:39.178626 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 07:43:40.023282 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ActiveEnterTimestampMonotonic": "153283857", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:31 UTC", "AssertTimestampMonotonic": "153229726", "Before": "ssh.service shutdown.target sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "38698000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ConditionTimestampMonotonic": "153229681", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2162", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ExecMainStartTimestampMonotonic": "153255967", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2161 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2161 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2165 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2165 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:31 UTC", "InactiveExitTimestampMonotonic": "153237299", "InvocationID": "0bd4cbafa82e4db1a511cba3b44f8716", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2162", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3523477504", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2273280", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 07:43:31 UTC", "StateChangeTimestampMonotonic": "153283857", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:40.031999 | ubuntu-noble | 2026-06-02 07:43:40.032104 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 07:43:40.529390 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.009303", "end": "2026-06-02 07:43:40.479291", "msg": "", "rc": 0, "start": "2026-06-02 07:43:40.469988", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 07:43:40.529448 | ubuntu-noble | 2026-06-02 07:43:40.529457 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 07:43:40.938189 | ubuntu-noble | --- before 2026-06-02 07:43:40.938385 | ubuntu-noble | +++ after 2026-06-02 07:43:40.938607 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 07:43:40.938775 | ubuntu-noble | { 2026-06-02 07:43:40.938942 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 07:43:40.939101 | ubuntu-noble | - "state": "file" 2026-06-02 07:43:40.939262 | ubuntu-noble | + "state": "absent" 2026-06-02 07:43:40.939462 | ubuntu-noble | } 2026-06-02 07:43:40.939649 | ubuntu-noble | 2026-06-02 07:43:40.939821 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 07:43:40.940001 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 07:43:40.940146 | ubuntu-noble | 2026-06-02 07:43:40.941266 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 07:43:41.719242 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ActiveEnterTimestampMonotonic": "153283857", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:31 UTC", "AssertTimestampMonotonic": "153229726", "Before": "ssh.service shutdown.target sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40106000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ConditionTimestampMonotonic": "153229681", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2162", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:31 UTC", "ExecMainStartTimestampMonotonic": "153255967", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2161 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2161 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2165 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:31 UTC] ; stop_time=[Tue 2026-06-02 07:43:31 UTC] ; pid=2165 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:31 UTC", "InactiveExitTimestampMonotonic": "153237299", "InvocationID": "0bd4cbafa82e4db1a511cba3b44f8716", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2162", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3529302016", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2273280", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 07:43:31 UTC", "StateChangeTimestampMonotonic": "153283857", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:41.725473 | ubuntu-noble | 2026-06-02 07:43:41.725525 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 07:43:42.140651 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.059020", "end": "2026-06-02 07:43:42.091851", "msg": "", "rc": 0, "start": "2026-06-02 07:43:42.032831", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2554\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 787\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2554\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 783\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2554", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 787", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2554", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 783", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 07:43:42.140711 | ubuntu-noble | 2026-06-02 07:43:42.140718 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 07:43:42.937289 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 07:43:41 UTC", "ActiveEnterTimestampMonotonic": "163211367", "ActiveExitTimestamp": "Tue 2026-06-02 07:43:41 UTC", "ActiveExitTimestampMonotonic": "163051000", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 07:43:41 UTC", "AssertTimestampMonotonic": "163089643", "Before": "ssh.service shutdown.target sysinit.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "155621000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 07:43:41 UTC", "ConditionTimestampMonotonic": "163089557", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2554", "ExecMainStartTimestamp": "Tue 2026-06-02 07:43:41 UTC", "ExecMainStartTimestampMonotonic": "163121356", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 07:43:41 UTC] ; stop_time=[Tue 2026-06-02 07:43:41 UTC] ; pid=2553 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 07:43:41 UTC] ; stop_time=[Tue 2026-06-02 07:43:41 UTC] ; pid=2553 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 07:43:41 UTC] ; stop_time=[Tue 2026-06-02 07:43:41 UTC] ; pid=2557 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 07:43:41 UTC] ; stop_time=[Tue 2026-06-02 07:43:41 UTC] ; pid=2557 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 07:43:41 UTC", "InactiveEnterTimestampMonotonic": "163088366", "InactiveExitTimestamp": "Tue 2026-06-02 07:43:41 UTC", "InactiveExitTimestampMonotonic": "163099376", "InvocationID": "7949568155154f4cb84ca43c1ae7f0aa", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2554", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3543810048", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2138112", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 07:43:41 UTC", "StateChangeTimestampMonotonic": "163211367", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 07:43:42.937412 | ubuntu-noble | 2026-06-02 07:43:42.937426 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 07:43:42.937435 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 07:43:42.937442 | ubuntu-noble | 2026-06-02 07:43:43.028551 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 07:43:43.028673 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 07:43:43.395668 | debian-bookworm | ok: Runtime: 0:00:17.189418 2026-06-02 07:43:43.427651 | ubuntu-noble | ok: Runtime: 0:00:21.229296 2026-06-02 07:43:43.453255 | 2026-06-02 07:43:43.453399 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 07:43:44.122905 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:44.135006 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:44.302581 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 07:43:44.312448 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:44.638136 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:44.638777 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:44.661813 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:44.667337 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 07:43:44.667459 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:44.844089 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 07:43:44.844774 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 07:43:44.869109 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 07:43:44.874966 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 07:43:44.875049 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 07:43:46.148803 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 07:43:46.150563 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 07:43:46.151782 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:46.151792 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:46.151800 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:46.151808 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:46.151814 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:46.151820 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 07:43:46.151825 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:46.151830 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:46.151835 | debian-bookworm | 2026-06-02 07:43:46.151969 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:46.151976 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 07:43:46.151981 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:46.151986 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:46.151991 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:46.151997 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:46.152002 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:46.152007 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:46.152012 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:46.152018 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:46.152023 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:46.152028 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:46.152033 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:46.152038 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:46.152044 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:46.152049 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:46.152054 | debian-bookworm | 2026-06-02 07:43:46.152162 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:46.399808 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 07:43:46.415366 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 07:43:46.415656 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 07:43:46.416011 | debian-bookworm | using: pytest-8.4.2 2026-06-02 07:43:46.416283 | debian-bookworm | registered third-party plugins: 2026-06-02 07:43:46.416927 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 07:43:46.417206 | debian-bookworm | rootdir: /home/zuul 2026-06-02 07:43:46.417531 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 07:43:46.482234 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 07:43:46.484298 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 07:43:46.485519 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 07:43:46.485531 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 07:43:46.485540 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 07:43:46.485547 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 07:43:46.485552 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 07:43:46.485558 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 07:43:46.485563 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 07:43:46.485568 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 07:43:46.485573 | ubuntu-noble | 2026-06-02 07:43:46.485676 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 07:43:46.485683 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 07:43:46.485687 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 07:43:46.485701 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 07:43:46.485706 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 07:43:46.485711 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 07:43:46.485716 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 07:43:46.485720 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 07:43:46.485725 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 07:43:46.485730 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 07:43:46.485734 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 07:43:46.485739 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 07:43:46.485744 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 07:43:46.485748 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 07:43:46.485753 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 07:43:46.485757 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:46.485762 | ubuntu-noble | 2026-06-02 07:43:46.485903 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 07:43:46.768213 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 07:43:46.797403 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 07:43:46.797451 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 07:43:46.797462 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 07:43:46.797472 | ubuntu-noble | registered third-party plugins: 2026-06-02 07:43:46.797488 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 07:43:46.797605 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 07:43:46.797856 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 07:43:47.457325 | debian-bookworm | collecting ... collected 6 items 2026-06-02 07:43:47.457683 | debian-bookworm | 2026-06-02 07:43:48.031092 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 07:43:48.031344 | ubuntu-noble | 2026-06-02 07:43:51.816829 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 07:43:51.858005 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 07:43:52.772813 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 07:43:52.818947 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 07:43:54.488757 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 07:43:55.632209 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 07:43:59.143816 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 07:44:00.205791 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 07:44:00.275426 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 07:44:00.275944 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 07:44:00.276233 | debian-bookworm | 2026-06-02 07:44:00.276553 | debian-bookworm | ============================== 6 passed in 13.83s ============================== 2026-06-02 07:44:00.304193 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 07:44:00.304289 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 07:44:00.305015 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 07:44:01.101456 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 07:44:02.410273 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 07:44:02.493429 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 07:44:02.493505 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 07:44:02.493620 | ubuntu-noble | 2026-06-02 07:44:02.494577 | ubuntu-noble | ============================== 6 passed in 15.65s ============================== 2026-06-02 07:44:02.550511 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 07:44:02.551217 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 07:44:02.552289 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 07:44:03.098228 | debian-bookworm | ok: Runtime: 0:00:16.559143 2026-06-02 07:44:03.105210 | ubuntu-noble | ok: Runtime: 0:00:18.734489 2026-06-02 07:44:03.112515 | 2026-06-02 07:44:03.112658 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 07:44:03.690336 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:44:03.691052 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:44:03.702761 | 2026-06-02 07:44:03.702921 | PLAY RECAP 2026-06-02 07:44:03.702981 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 07:44:03.703012 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 07:44:03.703033 | 2026-06-02 07:44:03.863602 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 07:44:03.865340 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 07:44:04.649714 | 2026-06-02 07:44:04.649913 | PLAY [Collect container logs] 2026-06-02 07:44:04.665292 | 2026-06-02 07:44:04.665509 | TASK [Create container log directory] 2026-06-02 07:44:05.295588 | ubuntu-noble | changed 2026-06-02 07:44:05.304782 | debian-bookworm | changed 2026-06-02 07:44:05.310592 | 2026-06-02 07:44:05.310710 | TASK [Capture container overview] 2026-06-02 07:44:05.880756 | debian-bookworm | ok: Runtime: 0:00:00.009212 2026-06-02 07:44:05.893247 | ubuntu-noble | ok: Runtime: 0:00:00.009729 2026-06-02 07:44:05.902466 | 2026-06-02 07:44:05.902615 | TASK [List containers] 2026-06-02 07:44:06.459380 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 07:44:06.459885 | debian-bookworm | { 2026-06-02 07:44:06.459961 | debian-bookworm | "failed_when_result": false, 2026-06-02 07:44:06.460006 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 07:44:06.460051 | debian-bookworm | "rc": 2 2026-06-02 07:44:06.460087 | debian-bookworm | } 2026-06-02 07:44:06.468580 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 07:44:06.468740 | ubuntu-noble | { 2026-06-02 07:44:06.468784 | ubuntu-noble | "failed_when_result": false, 2026-06-02 07:44:06.468814 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 07:44:06.468841 | ubuntu-noble | "rc": 2 2026-06-02 07:44:06.468897 | ubuntu-noble | } 2026-06-02 07:44:06.475241 | 2026-06-02 07:44:06.475359 | LOOP [Save per-container logs] 2026-06-02 07:44:06.538283 | 2026-06-02 07:44:06.538496 | LOOP [Save per-container inspect (state and health)] 2026-06-02 07:44:06.598621 | 2026-06-02 07:44:06.598878 | TASK [Capture netbox systemd unit journal] 2026-06-02 07:44:07.172509 | debian-bookworm | ok: Runtime: 0:00:00.015573 2026-06-02 07:44:07.178123 | ubuntu-noble | ok: Runtime: 0:00:00.009053 2026-06-02 07:44:07.183188 | 2026-06-02 07:44:07.183299 | TASK [Capture netbox service state] 2026-06-02 07:44:07.791392 | debian-bookworm | ok: Runtime: 0:00:00.035765 2026-06-02 07:44:07.797160 | ubuntu-noble | ok: Runtime: 0:00:00.031842 2026-06-02 07:44:07.806481 | 2026-06-02 07:44:07.806605 | TASK [Capture docker compose version] 2026-06-02 07:44:08.369438 | debian-bookworm | ok: Runtime: 0:00:00.008786 2026-06-02 07:44:08.381412 | ubuntu-noble | ok: Runtime: 0:00:00.006756 2026-06-02 07:44:08.389758 | 2026-06-02 07:44:08.390122 | TASK [Open container log permissions] 2026-06-02 07:44:08.669049 | debian-bookworm | changed 2026-06-02 07:44:08.705573 | ubuntu-noble | changed 2026-06-02 07:44:08.708430 | 2026-06-02 07:44:08.708522 | PLAY RECAP 2026-06-02 07:44:08.708582 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 07:44:08.708618 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 07:44:08.708641 | 2026-06-02 07:44:08.852287 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 07:44:08.853838 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 07:44:09.669023 | 2026-06-02 07:44:09.669198 | PLAY [Base post-fetch] 2026-06-02 07:44:09.683997 | 2026-06-02 07:44:09.684148 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 07:44:09.769048 | debian-bookworm | ok 2026-06-02 07:44:09.777091 | ubuntu-noble | ok 2026-06-02 07:44:09.784050 | 2026-06-02 07:44:09.784224 | TASK [fetch-output : Set log path for single node] 2026-06-02 07:44:09.815256 | debian-bookworm | skipping: Conditional result was False 2026-06-02 07:44:09.836452 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 07:44:09.845356 | 2026-06-02 07:44:09.845535 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 07:44:10.347248 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/logs/ubuntu-noble" 2026-06-02 07:44:10.381725 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/logs/debian-bookworm" 2026-06-02 07:44:10.629717 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/artifacts" 2026-06-02 07:44:10.664968 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/artifacts" 2026-06-02 07:44:10.902284 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/docs" 2026-06-02 07:44:10.940995 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/cc224eac2a3540c9aa949d4fa250157a/work/docs" 2026-06-02 07:44:10.941228 | debian-bookworm -> localhost | changed: All items complete 2026-06-02 07:44:10.941313 | 2026-06-02 07:44:10.962800 | 2026-06-02 07:44:10.963028 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 07:44:11.721272 | ubuntu-noble | changed: 2026-06-02 07:44:11.721612 | ubuntu-noble | .d..t...... ./ 2026-06-02 07:44:11.721665 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 07:44:11.721701 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 07:44:11.721733 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 07:44:11.721765 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 07:44:11.721795 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 07:44:11.721825 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 07:44:11.721853 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 07:44:11.721932 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 07:44:11.728762 | debian-bookworm | changed: 2026-06-02 07:44:11.728966 | debian-bookworm | .d..t...... ./ 2026-06-02 07:44:11.729014 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 07:44:11.729045 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 07:44:11.729072 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 07:44:11.729097 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 07:44:11.729120 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 07:44:11.729144 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 07:44:11.729167 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 07:44:11.729189 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 07:44:12.293808 | debian-bookworm | changed: .d..t...... ./ 2026-06-02 07:44:12.308286 | ubuntu-noble | ok 2026-06-02 07:44:12.884686 | debian-bookworm | changed: .d..t...... ./ 2026-06-02 07:44:12.918025 | ubuntu-noble | ok 2026-06-02 07:44:12.918364 | ubuntu-noble | changed: All items complete 2026-06-02 07:44:12.918434 | 2026-06-02 07:44:12.957636 | 2026-06-02 07:44:12.957802 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 07:44:13.555180 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.010923 2026-06-02 07:44:13.850638 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.010941 2026-06-02 07:44:13.875842 | 2026-06-02 07:44:13.876017 | PLAY RECAP 2026-06-02 07:44:13.876087 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 07:44:13.876144 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 07:44:13.876173 | 2026-06-02 07:44:14.029366 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 07:44:14.032545 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 07:44:14.807372 | 2026-06-02 07:44:14.807548 | PLAY [Base post] 2026-06-02 07:44:14.820986 | 2026-06-02 07:44:14.821126 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 07:44:15.642472 | debian-bookworm | changed 2026-06-02 07:44:15.718412 | ubuntu-noble | changed 2026-06-02 07:44:15.732296 | 2026-06-02 07:44:15.732416 | PLAY RECAP 2026-06-02 07:44:15.732510 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 07:44:15.732551 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 07:44:15.732576 | 2026-06-02 07:44:15.873520 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 07:44:15.877373 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 07:44:16.740497 | 2026-06-02 07:44:16.740691 | PLAY [Base post-logs] 2026-06-02 07:44:16.752263 | 2026-06-02 07:44:16.752410 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 07:44:17.218944 | localhost | changed 2026-06-02 07:44:17.231439 | 2026-06-02 07:44:17.231621 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 07:44:17.260139 | localhost | ok 2026-06-02 07:44:17.267521 | 2026-06-02 07:44:17.267683 | TASK [Set zuul-log-path fact] 2026-06-02 07:44:17.284856 | localhost | ok 2026-06-02 07:44:17.295039 | 2026-06-02 07:44:17.295162 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 07:44:17.320678 | localhost | ok 2026-06-02 07:44:17.324822 | 2026-06-02 07:44:17.324966 | TASK [upload-logs : Create log directories] 2026-06-02 07:44:17.848423 | localhost | changed 2026-06-02 07:44:17.852847 | 2026-06-02 07:44:17.852997 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 07:44:18.390154 | localhost -> localhost | ok: Runtime: 0:00:00.009725 2026-06-02 07:44:18.396194 | 2026-06-02 07:44:18.396363 | TASK [upload-logs : Upload logs to log server] 2026-06-02 07:44:19.004231 | localhost | Output suppressed because no_log was given 2026-06-02 07:44:19.008654 | 2026-06-02 07:44:19.009499 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 07:44:19.072206 | localhost | skipping: Conditional result was False 2026-06-02 07:44:19.078376 | localhost | skipping: Conditional result was False 2026-06-02 07:44:19.092823 | 2026-06-02 07:44:19.093089 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 07:44:19.154212 | localhost | skipping: Conditional result was False 2026-06-02 07:44:19.154807 | 2026-06-02 07:44:19.159320 | localhost | skipping: Conditional result was False 2026-06-02 07:44:19.166765 | 2026-06-02 07:44:19.167175 | LOOP [upload-logs : Upload console log and json output]