2026-07-20 02:49:55.446472 | Job console starting 2026-07-20 02:49:55.476978 | Updating git repos 2026-07-20 02:49:55.517143 | Cloning repos into workspace 2026-07-20 02:49:55.605205 | Restoring repo states 2026-07-20 02:49:55.633566 | Merging changes 2026-07-20 02:49:56.259561 | Checking out repos 2026-07-20 02:49:56.317258 | Preparing playbooks 2026-07-20 02:49:57.143706 | Running Ansible setup 2026-07-20 02:50:02.801089 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-07-20 02:50:03.735867 | 2026-07-20 02:50:03.736211 | PLAY [Base pre] 2026-07-20 02:50:03.759313 | 2026-07-20 02:50:03.759478 | TASK [Setup log path fact] 2026-07-20 02:50:03.791331 | debian-bookworm | ok 2026-07-20 02:50:03.811818 | 2026-07-20 02:50:03.812058 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-07-20 02:50:03.846589 | debian-bookworm | ok 2026-07-20 02:50:03.858416 | 2026-07-20 02:50:03.858566 | TASK [emit-job-header : Print job information] 2026-07-20 02:50:03.903034 | # Job Information 2026-07-20 02:50:03.903255 | Ansible Version: 2.16.14 2026-07-20 02:50:03.903292 | Job: ansible-collection-services-molecule-auditd 2026-07-20 02:50:03.903329 | Pipeline: check 2026-07-20 02:50:03.903355 | Executor: 521e9411259a 2026-07-20 02:50:03.903375 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2140 2026-07-20 02:50:03.903398 | Event ID: c5bda130-83e3-11f1-9fb6-0ceb7882a9d0 2026-07-20 02:50:03.908476 | 2026-07-20 02:50:03.908594 | LOOP [emit-job-header : Print node information] 2026-07-20 02:50:04.022439 | debian-bookworm | ok: 2026-07-20 02:50:04.022768 | debian-bookworm | # Node Information 2026-07-20 02:50:04.022807 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-07-20 02:50:04.022857 | debian-bookworm | Hostname: debian 2026-07-20 02:50:04.022882 | debian-bookworm | Username: zuul 2026-07-20 02:50:04.022936 | debian-bookworm | Distro: Debian 12.15 2026-07-20 02:50:04.022963 | debian-bookworm | Provider: regiocloud-a 2026-07-20 02:50:04.022985 | debian-bookworm | Region: 2026-07-20 02:50:04.023007 | debian-bookworm | Label: debian-bookworm 2026-07-20 02:50:04.023028 | debian-bookworm | Product Name: OpenStack Nova 2026-07-20 02:50:04.023047 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe00:b5e6 2026-07-20 02:50:04.097549 | debian-bookworm | ok: 2026-07-20 02:50:04.097765 | debian-bookworm | # Node Information 2026-07-20 02:50:04.097825 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-07-20 02:50:04.097870 | debian-bookworm | Hostname: ubuntu 2026-07-20 02:50:04.097933 | debian-bookworm | Username: zuul 2026-07-20 02:50:04.097972 | debian-bookworm | Distro: Ubuntu 24.04 2026-07-20 02:50:04.098008 | debian-bookworm | Provider: regiocloud-a 2026-07-20 02:50:04.098044 | debian-bookworm | Region: 2026-07-20 02:50:04.098078 | debian-bookworm | Label: ubuntu-noble 2026-07-20 02:50:04.098111 | debian-bookworm | Product Name: OpenStack Nova 2026-07-20 02:50:04.098146 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fed4:573d 2026-07-20 02:50:04.119595 | 2026-07-20 02:50:04.119777 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-07-20 02:50:04.678088 | debian-bookworm -> localhost | changed 2026-07-20 02:50:04.690779 | 2026-07-20 02:50:04.691327 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-07-20 02:50:06.076514 | ubuntu-noble -> localhost | changed 2026-07-20 02:50:06.108379 | debian-bookworm -> localhost | ok 2026-07-20 02:50:06.123939 | 2026-07-20 02:50:06.124079 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-07-20 02:50:06.468581 | debian-bookworm -> localhost | ok 2026-07-20 02:50:06.477322 | 2026-07-20 02:50:06.477498 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-07-20 02:50:06.517039 | debian-bookworm | ok 2026-07-20 02:50:06.532049 | ubuntu-noble | ok 2026-07-20 02:50:06.554370 | debian-bookworm | included: /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-07-20 02:50:06.554516 | ubuntu-noble | included: /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-07-20 02:50:06.562817 | 2026-07-20 02:50:06.562994 | TASK [add-build-sshkey : Create Temp SSH key] 2026-07-20 02:50:07.455477 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-07-20 02:50:07.455791 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/ccec4a8dcf0b44cf90ab410fd336d0c4_id_rsa 2026-07-20 02:50:07.455832 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/ccec4a8dcf0b44cf90ab410fd336d0c4_id_rsa.pub 2026-07-20 02:50:07.455860 | debian-bookworm -> localhost | The key fingerprint is: 2026-07-20 02:50:07.455888 | debian-bookworm -> localhost | SHA256:BEWsnyOuRNIuIoidy5HC/W4pFk6iMq3uvnp9H40pDTI zuul-build-sshkey 2026-07-20 02:50:07.455926 | debian-bookworm -> localhost | The key's randomart image is: 2026-07-20 02:50:07.455954 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-07-20 02:50:07.455977 | debian-bookworm -> localhost | | .+o | 2026-07-20 02:50:07.456000 | debian-bookworm -> localhost | | .. | 2026-07-20 02:50:07.456022 | debian-bookworm -> localhost | | .. | 2026-07-20 02:50:07.456043 | debian-bookworm -> localhost | | . .. | 2026-07-20 02:50:07.456064 | debian-bookworm -> localhost | | . E ..S. | 2026-07-20 02:50:07.456084 | debian-bookworm -> localhost | |+o.O o.o++ | 2026-07-20 02:50:07.456104 | debian-bookworm -> localhost | |BoXo+.o.=.. | 2026-07-20 02:50:07.456124 | debian-bookworm -> localhost | |=+oOooo. . | 2026-07-20 02:50:07.456144 | debian-bookworm -> localhost | |OO= == .. | 2026-07-20 02:50:07.456165 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-07-20 02:50:07.456230 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.280361 2026-07-20 02:50:07.471084 | 2026-07-20 02:50:07.471461 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-07-20 02:50:07.515290 | debian-bookworm | ok 2026-07-20 02:50:07.536345 | ubuntu-noble | ok 2026-07-20 02:50:07.554717 | debian-bookworm | included: /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-07-20 02:50:07.554880 | ubuntu-noble | included: /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-07-20 02:50:07.567334 | 2026-07-20 02:50:07.567514 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-07-20 02:50:07.596498 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:50:07.607961 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:50:07.625869 | 2026-07-20 02:50:07.626125 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-07-20 02:50:08.356869 | ubuntu-noble | changed 2026-07-20 02:50:08.375295 | debian-bookworm | changed 2026-07-20 02:50:08.382876 | 2026-07-20 02:50:08.383053 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-07-20 02:50:08.699753 | debian-bookworm | ok 2026-07-20 02:50:08.716572 | ubuntu-noble | ok 2026-07-20 02:50:08.722428 | 2026-07-20 02:50:08.722539 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-07-20 02:50:09.494023 | debian-bookworm | changed 2026-07-20 02:50:09.539589 | ubuntu-noble | changed 2026-07-20 02:50:09.549209 | 2026-07-20 02:50:09.549384 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-07-20 02:50:10.305141 | debian-bookworm | changed 2026-07-20 02:50:10.313670 | ubuntu-noble | changed 2026-07-20 02:50:10.322185 | 2026-07-20 02:50:10.322338 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-07-20 02:50:10.360164 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:50:10.371529 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:50:10.383083 | 2026-07-20 02:50:10.383227 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-07-20 02:50:10.859830 | debian-bookworm -> localhost | changed 2026-07-20 02:50:10.879221 | 2026-07-20 02:50:10.879387 | TASK [add-build-sshkey : Add back temp key] 2026-07-20 02:50:11.284600 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/ccec4a8dcf0b44cf90ab410fd336d0c4_id_rsa (zuul-build-sshkey) 2026-07-20 02:50:11.285671 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.031563 2026-07-20 02:50:11.294046 | 2026-07-20 02:50:11.294199 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-07-20 02:50:11.716656 | ubuntu-noble | ok 2026-07-20 02:50:11.724046 | debian-bookworm | ok 2026-07-20 02:50:11.730543 | 2026-07-20 02:50:11.730671 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-07-20 02:50:11.759559 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:50:11.781013 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:50:11.812498 | 2026-07-20 02:50:11.812702 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-07-20 02:50:12.217083 | debian-bookworm | ok 2026-07-20 02:50:12.243328 | ubuntu-noble | ok 2026-07-20 02:50:12.265846 | 2026-07-20 02:50:12.266059 | TASK [validate-host : Define zuul_info_dir fact] 2026-07-20 02:50:12.334542 | debian-bookworm | ok 2026-07-20 02:50:12.350725 | ubuntu-noble | ok 2026-07-20 02:50:12.356642 | 2026-07-20 02:50:12.356875 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-07-20 02:50:12.776463 | debian-bookworm -> localhost | ok 2026-07-20 02:50:12.784353 | 2026-07-20 02:50:12.784507 | TASK [validate-host : Collect information about the host] 2026-07-20 02:50:14.082937 | debian-bookworm | ok 2026-07-20 02:50:14.165958 | ubuntu-noble | ok 2026-07-20 02:50:14.183501 | 2026-07-20 02:50:14.183646 | TASK [validate-host : Sanitize hostname] 2026-07-20 02:50:14.250003 | debian-bookworm | ok 2026-07-20 02:50:14.268958 | ubuntu-noble | ok 2026-07-20 02:50:14.277330 | 2026-07-20 02:50:14.278237 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-07-20 02:50:14.851572 | debian-bookworm -> localhost | changed 2026-07-20 02:50:14.924853 | ubuntu-noble -> localhost | changed 2026-07-20 02:50:14.932120 | 2026-07-20 02:50:14.932271 | TASK [validate-host : Collect information about zuul worker] 2026-07-20 02:50:15.456450 | debian-bookworm | ok 2026-07-20 02:50:15.488779 | ubuntu-noble | ok 2026-07-20 02:50:15.497274 | 2026-07-20 02:50:15.497446 | TASK [validate-host : Write out all zuul information for each host] 2026-07-20 02:50:16.073504 | debian-bookworm -> localhost | changed 2026-07-20 02:50:16.179240 | ubuntu-noble -> localhost | changed 2026-07-20 02:50:16.198700 | 2026-07-20 02:50:16.199032 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-07-20 02:50:16.488746 | debian-bookworm | ok 2026-07-20 02:50:16.567649 | ubuntu-noble | ok 2026-07-20 02:50:16.577105 | 2026-07-20 02:50:16.577285 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-07-20 02:50:17.902576 | ubuntu-noble | changed: 2026-07-20 02:50:17.903021 | ubuntu-noble | cd+++++++++ src/ 2026-07-20 02:50:17.903152 | ubuntu-noble | cd+++++++++ src/github.com/ 2026-07-20 02:50:17.903194 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2026-07-20 02:50:17.903227 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-07-20 02:50:17.903258 | ubuntu-noble | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:40.118521 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:51:40.150241 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:40.758479 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:40.759107 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:51:40.782208 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:51:40.788228 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-07-20 02:51:40.788303 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:51:40.648133 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:40.648931 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:51:40.671058 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:51:40.676753 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-07-20 02:51:40.676807 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:51:42.019087 | debian-bookworm | INFO [delegated > dependency] Executing 2026-07-20 02:51:42.019403 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-07-20 02:51:42.396217 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-07-20 02:51:42.396507 | debian-bookworm | config file = None 2026-07-20 02:51:42.396733 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-07-20 02:51:42.396982 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-07-20 02:51:42.397208 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-07-20 02:51:42.397400 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-07-20 02:51:42.397621 | debian-bookworm | python version = 3.11.2 (main, May 12 2026, 05:17:27) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-07-20 02:51:42.397832 | debian-bookworm | jinja version = 3.1.6 2026-07-20 02:51:42.398010 | debian-bookworm | libyaml = True 2026-07-20 02:51:42.398202 | debian-bookworm | No config file found; using defaults 2026-07-20 02:51:42.398555 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-07-20 02:51:42.402929 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-07-20 02:51:42.403185 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-07-20 02:51:42.408651 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-07-20 02:51:42.409108 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-07-20 02:51:42.410227 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-07-20 02:51:42.410661 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-07-20 02:51:42.411056 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-07-20 02:51:42.411432 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-07-20 02:51:42.411716 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-07-20 02:51:42.412189 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-07-20 02:51:42.413388 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-07-20 02:51:42.413796 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-07-20 02:51:42.414127 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-07-20 02:51:42.414576 | debian-bookworm | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-07-20 02:51:42.414953 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-07-20 02:51:42.415306 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-07-20 02:51:42.416996 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-07-20 02:51:42.417323 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-07-20 02:51:42.417999 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-07-20 02:51:42.418347 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-07-20 02:51:42.418633 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-07-20 02:51:42.418958 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-07-20 02:51:42.420901 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-07-20 02:51:42.421424 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-07-20 02:51:42.421722 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-07-20 02:51:42.422040 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-07-20 02:51:42.423418 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-07-20 02:51:42.423819 | debian-bookworm | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-07-20 02:51:42.424272 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-07-20 02:51:42.424669 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-07-20 02:51:42.424930 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-07-20 02:51:42.425794 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-07-20 02:51:42.426205 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-07-20 02:51:42.426640 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-07-20 02:51:42.427007 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-07-20 02:51:42.427266 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-07-20 02:51:42.427710 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-07-20 02:51:42.428121 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-07-20 02:51:42.428377 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-07-20 02:51:42.428746 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-07-20 02:51:42.429000 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-07-20 02:51:42.429348 | debian-bookworm | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-07-20 02:51:42.429620 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-07-20 02:51:42.430022 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-07-20 02:51:42.430416 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-07-20 02:51:42.430855 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-07-20 02:51:42.431669 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-07-20 02:51:42.432082 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-07-20 02:51:42.432418 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-07-20 02:51:42.432716 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-07-20 02:51:42.433057 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-07-20 02:51:42.433385 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-07-20 02:51:42.433669 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-07-20 02:51:42.434018 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-07-20 02:51:42.434430 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-07-20 02:51:42.434716 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-07-20 02:51:42.435064 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-07-20 02:51:42.435310 | debian-bookworm | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-07-20 02:51:42.435751 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-07-20 02:51:42.436035 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-07-20 02:51:42.436367 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-07-20 02:51:42.436638 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-07-20 02:51:42.014226 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-07-20 02:51:42.014793 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-07-20 02:51:42.399340 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-07-20 02:51:42.399429 | ubuntu-noble | config file = None 2026-07-20 02:51:42.399443 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-07-20 02:51:42.399723 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-07-20 02:51:42.400074 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-07-20 02:51:42.400464 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-07-20 02:51:42.400790 | ubuntu-noble | python version = 3.12.3 (main, Jun 19 2026, 12:46:00) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-07-20 02:51:42.401050 | ubuntu-noble | jinja version = 3.1.6 2026-07-20 02:51:42.401309 | ubuntu-noble | libyaml = True 2026-07-20 02:51:42.401626 | ubuntu-noble | No config file found; using defaults 2026-07-20 02:51:42.402059 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-07-20 02:51:42.411908 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-07-20 02:51:42.412349 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-07-20 02:51:42.422834 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-07-20 02:51:42.423230 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-07-20 02:51:42.423679 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-07-20 02:51:42.424069 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-07-20 02:51:42.424783 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-07-20 02:51:42.425169 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-07-20 02:51:42.425609 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-07-20 02:51:42.425998 | ubuntu-noble | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-07-20 02:51:42.426896 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-07-20 02:51:42.427239 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-07-20 02:51:42.427794 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-07-20 02:51:42.428135 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-07-20 02:51:42.430329 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-07-20 02:51:42.430354 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-07-20 02:51:42.430359 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-07-20 02:51:42.430363 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-07-20 02:51:42.430367 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-07-20 02:51:42.430496 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-07-20 02:51:42.432875 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-07-20 02:51:42.433245 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-07-20 02:51:42.433564 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-07-20 02:51:42.433988 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-07-20 02:51:42.435736 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-07-20 02:51:42.436024 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-07-20 02:51:42.436602 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-07-20 02:51:42.436886 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-07-20 02:51:42.437499 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-07-20 02:51:42.437785 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-07-20 02:51:42.438204 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-07-20 02:51:42.438545 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-07-20 02:51:42.439325 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-07-20 02:51:42.439756 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-07-20 02:51:42.440123 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-07-20 02:51:42.440417 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-07-20 02:51:42.441129 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-07-20 02:51:42.441603 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-07-20 02:51:42.442425 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-07-20 02:51:42.442741 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-07-20 02:51:42.443143 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-07-20 02:51:42.443465 | ubuntu-noble | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-07-20 02:51:42.443711 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-07-20 02:51:42.443957 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-07-20 02:51:42.444540 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-07-20 02:51:42.444859 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-07-20 02:51:42.446003 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-07-20 02:51:42.446341 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-07-20 02:51:42.446867 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-07-20 02:51:42.447166 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-07-20 02:51:42.447498 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-07-20 02:51:42.447828 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-07-20 02:51:42.448059 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-07-20 02:51:42.448341 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-07-20 02:51:42.449028 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-07-20 02:51:42.449506 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-07-20 02:51:42.449738 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-07-20 02:51:42.449943 | ubuntu-noble | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-07-20 02:51:42.452904 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-07-20 02:51:42.453258 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-07-20 02:51:42.453557 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-07-20 02:51:42.453916 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-07-20 02:51:42.454146 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-07-20 02:51:42.454505 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-07-20 02:51:42.454966 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-07-20 02:51:42.455250 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-07-20 02:51:42.455578 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-07-20 02:51:42.455908 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-07-20 02:51:42.473392 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-07-20 02:51:42.473508 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-07-20 02:51:42.474206 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-07-20 02:51:42.474657 | debian-bookworm | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-07-20 02:51:42.474990 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-07-20 02:51:42.475293 | debian-bookworm | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-07-20 02:51:42.475685 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-07-20 02:51:42.476048 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-07-20 02:51:42.476572 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-07-20 02:51:42.476881 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-07-20 02:51:42.477115 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-07-20 02:51:42.477392 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-07-20 02:51:42.477998 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-07-20 02:51:42.478261 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-07-20 02:51:42.478650 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-07-20 02:51:42.478982 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-07-20 02:51:42.479298 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-07-20 02:51:42.479624 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-07-20 02:51:42.479865 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-07-20 02:51:42.480157 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-07-20 02:51:42.480558 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-07-20 02:51:42.480912 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-07-20 02:51:42.481528 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-07-20 02:51:42.481824 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-07-20 02:51:42.482164 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-07-20 02:51:42.482457 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-07-20 02:51:42.482754 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-07-20 02:51:42.483045 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-07-20 02:51:42.483734 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-07-20 02:51:42.484045 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-07-20 02:51:42.484374 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-07-20 02:51:42.484680 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-07-20 02:51:42.484872 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-07-20 02:51:42.485147 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-07-20 02:51:42.485411 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-07-20 02:51:42.485720 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-07-20 02:51:42.489140 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-07-20 02:51:42.489515 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-07-20 02:51:42.489862 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-07-20 02:51:42.490158 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-07-20 02:51:42.492011 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-07-20 02:51:42.492317 | debian-bookworm | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-07-20 02:51:42.493013 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-07-20 02:51:42.493311 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-07-20 02:51:42.495246 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-07-20 02:51:42.495631 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-07-20 02:51:42.501293 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-07-20 02:51:42.501592 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-07-20 02:51:42.502368 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-07-20 02:51:42.502713 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-07-20 02:51:42.503375 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-07-20 02:51:42.503753 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-07-20 02:51:42.504054 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-07-20 02:51:42.504338 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-07-20 02:51:42.505882 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-07-20 02:51:42.506254 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-07-20 02:51:42.507022 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-07-20 02:51:42.507345 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-07-20 02:51:42.507862 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-07-20 02:51:42.508169 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-07-20 02:51:42.508509 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-07-20 02:51:42.508819 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-07-20 02:51:42.509303 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-07-20 02:51:42.509657 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-07-20 02:51:42.510075 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-07-20 02:51:42.510394 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-07-20 02:51:42.510859 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-07-20 02:51:42.511156 | debian-bookworm | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-07-20 02:51:42.511572 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-07-20 02:51:42.511872 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-07-20 02:51:42.514368 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-07-20 02:51:42.515252 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-07-20 02:51:42.515785 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-07-20 02:51:42.516034 | debian-bookworm | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-07-20 02:51:42.516273 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-07-20 02:51:42.516624 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-07-20 02:51:42.516849 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-07-20 02:51:42.517076 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-07-20 02:51:42.517509 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-07-20 02:51:42.517616 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-07-20 02:51:42.517968 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-07-20 02:51:42.518285 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-07-20 02:51:42.526899 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-07-20 02:51:42.527171 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-07-20 02:51:42.527980 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-07-20 02:51:42.528283 | debian-bookworm | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-07-20 02:51:42.529119 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-07-20 02:51:42.529417 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-07-20 02:51:42.529911 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-07-20 02:51:42.530212 | debian-bookworm | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-07-20 02:51:42.530550 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-07-20 02:51:42.530848 | debian-bookworm | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-07-20 02:51:42.532413 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-07-20 02:51:42.532740 | debian-bookworm | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-07-20 02:51:42.533232 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-07-20 02:51:42.533547 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-07-20 02:51:42.534020 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-07-20 02:51:42.534322 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-07-20 02:51:42.535523 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-07-20 02:51:42.535910 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-07-20 02:51:42.536648 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-07-20 02:51:42.536979 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-07-20 02:51:42.537385 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-07-20 02:51:42.537727 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-07-20 02:51:42.538034 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-07-20 02:51:42.538338 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-07-20 02:51:42.538654 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-07-20 02:51:42.538960 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-07-20 02:51:42.539262 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-07-20 02:51:42.539639 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-07-20 02:51:42.539959 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-07-20 02:51:42.540260 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-07-20 02:51:42.542586 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-07-20 02:51:42.542809 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-07-20 02:51:42.546325 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-07-20 02:51:42.546576 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-07-20 02:51:42.547442 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-07-20 02:51:42.547804 | debian-bookworm | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-07-20 02:51:42.548305 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-07-20 02:51:42.548619 | debian-bookworm | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-07-20 02:51:42.550086 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-07-20 02:51:42.550436 | debian-bookworm | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-07-20 02:51:42.550670 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-07-20 02:51:42.551002 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-07-20 02:51:42.551216 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-07-20 02:51:42.551556 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-07-20 02:51:42.552287 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-07-20 02:51:42.552642 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-07-20 02:51:42.553123 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-07-20 02:51:42.553456 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-07-20 02:51:42.553849 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-07-20 02:51:42.554157 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-07-20 02:51:42.554372 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-07-20 02:51:42.554642 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-07-20 02:51:42.555430 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-07-20 02:51:42.555877 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-07-20 02:51:42.559865 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-07-20 02:51:42.560099 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-07-20 02:51:42.560261 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-07-20 02:51:42.758165 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-07-20 02:51:42.758294 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-07-20 02:51:42.484660 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-07-20 02:51:42.486330 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-07-20 02:51:42.486357 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-07-20 02:51:42.486362 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-07-20 02:51:42.486442 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-07-20 02:51:42.486741 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-07-20 02:51:42.487045 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-07-20 02:51:42.487556 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-07-20 02:51:42.487859 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-07-20 02:51:42.488162 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-07-20 02:51:42.488607 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-07-20 02:51:42.489001 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-07-20 02:51:42.489334 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-07-20 02:51:42.489702 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-07-20 02:51:42.490443 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-07-20 02:51:42.490787 | ubuntu-noble | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-07-20 02:51:42.491177 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-07-20 02:51:42.491588 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-07-20 02:51:42.491940 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-07-20 02:51:42.492283 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-07-20 02:51:42.531861 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-07-20 02:51:42.532258 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-07-20 02:51:42.533152 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-07-20 02:51:42.533630 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-07-20 02:51:42.534023 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-07-20 02:51:42.534515 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-07-20 02:51:42.534922 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-07-20 02:51:42.535344 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-07-20 02:51:42.536532 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-07-20 02:51:42.536880 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-07-20 02:51:42.537232 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-07-20 02:51:42.537638 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-07-20 02:51:42.538026 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-07-20 02:51:42.538442 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-07-20 02:51:42.538799 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-07-20 02:51:42.539144 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-07-20 02:51:42.539563 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-07-20 02:51:42.539928 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-07-20 02:51:42.540196 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-07-20 02:51:42.540632 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-07-20 02:51:42.542335 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-07-20 02:51:42.542359 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-07-20 02:51:42.542442 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-07-20 02:51:42.542860 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-07-20 02:51:42.543989 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-07-20 02:51:42.544272 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-07-20 02:51:42.545198 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-07-20 02:51:42.545533 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-07-20 02:51:42.546034 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-07-20 02:51:42.546359 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-07-20 02:51:42.547672 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-07-20 02:51:42.547955 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-07-20 02:51:42.548339 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-07-20 02:51:42.548792 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-07-20 02:51:42.549433 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-07-20 02:51:42.549718 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-07-20 02:51:42.550000 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-07-20 02:51:42.550345 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-07-20 02:51:42.550802 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-07-20 02:51:42.551079 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-07-20 02:51:42.551501 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-07-20 02:51:42.551797 | ubuntu-noble | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-07-20 02:51:42.552174 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-07-20 02:51:42.552496 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-07-20 02:51:42.554311 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-07-20 02:51:42.554616 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-07-20 02:51:42.555034 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-07-20 02:51:42.555344 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-07-20 02:51:42.558925 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-07-20 02:51:42.559200 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-07-20 02:51:42.560042 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-07-20 02:51:42.560334 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-07-20 02:51:42.560764 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-07-20 02:51:42.561048 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-07-20 02:51:42.563199 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-07-20 02:51:42.563524 | ubuntu-noble | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-07-20 02:51:42.564344 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-07-20 02:51:42.565124 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-07-20 02:51:42.565564 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-07-20 02:51:42.566320 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-07-20 02:51:42.567503 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-07-20 02:51:42.567871 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-07-20 02:51:42.568156 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-07-20 02:51:42.568485 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-07-20 02:51:42.569418 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-07-20 02:51:42.569715 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-07-20 02:51:42.569997 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-07-20 02:51:42.570314 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-07-20 02:51:42.570622 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-07-20 02:51:42.570906 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-07-20 02:51:42.571186 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-07-20 02:51:42.571586 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-07-20 02:51:42.573551 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-07-20 02:51:42.573872 | ubuntu-noble | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-07-20 02:51:42.576076 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-07-20 02:51:42.576428 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-07-20 02:51:42.577322 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-07-20 02:51:42.577355 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-07-20 02:51:42.577360 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-07-20 02:51:42.577651 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-07-20 02:51:42.577956 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-07-20 02:51:42.578263 | ubuntu-noble | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-07-20 02:51:42.582024 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-07-20 02:51:42.582517 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-07-20 02:51:42.582927 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-07-20 02:51:42.583366 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-07-20 02:51:42.589411 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-07-20 02:51:42.589817 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-07-20 02:51:42.590211 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-07-20 02:51:42.590658 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-07-20 02:51:42.590951 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-07-20 02:51:42.591431 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-07-20 02:51:42.592113 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-07-20 02:51:42.592567 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-07-20 02:51:42.592965 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-07-20 02:51:42.594322 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-07-20 02:51:42.594345 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-07-20 02:51:42.594428 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-07-20 02:51:42.594894 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-07-20 02:51:42.595198 | ubuntu-noble | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-07-20 02:51:42.595839 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-07-20 02:51:42.596165 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-07-20 02:51:42.596842 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-07-20 02:51:42.597348 | ubuntu-noble | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-07-20 02:51:42.597769 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-07-20 02:51:42.598149 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-07-20 02:51:42.598465 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-07-20 02:51:42.598736 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-07-20 02:51:42.599080 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-07-20 02:51:42.599416 | ubuntu-noble | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-07-20 02:51:42.602899 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-07-20 02:51:42.603276 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-07-20 02:51:42.603633 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-07-20 02:51:42.796134 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-07-20 02:51:42.796751 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-07-20 02:51:43.294119 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-07-20 02:51:43.579688 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-07-20 02:51:44.251328 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260712.0/ 2026-07-20 02:51:44.323426 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260712.0/ 2026-07-20 02:51:44.753230 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260712.0 2026-07-20 02:51:44.753800 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260712.0' from Ansible Galaxy 2026-07-20 02:51:45.846298 | debian-bookworm | Validating downloaded file hash 35b9909f5629f2c3887ea082fabdacce386e6921aacb19a4617336dec0edfc3c with expected hash 35b9909f5629f2c3887ea082fabdacce386e6921aacb19a4617336dec0edfc3c 2026-07-20 02:51:45.846631 | debian-bookworm | Collection 'osism.commons:0.20260712.0' obtained from server default https://galaxy.ansible.com/api/ 2026-07-20 02:51:46.059121 | debian-bookworm | Starting galaxy collection install process 2026-07-20 02:51:46.059584 | debian-bookworm | Process install dependency map 2026-07-20 02:51:46.059894 | debian-bookworm | Starting collection install process 2026-07-20 02:51:46.060186 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-07-20 02:51:46.060528 | debian-bookworm | 'community.docker:4.8.5' is already installed, skipping. 2026-07-20 02:51:46.060821 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-07-20 02:51:46.061080 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-07-20 02:51:46.061373 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260712.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1943sz0zk4la/tmpqn1tch9z/osism-commons-0.20260712.0-xo3mgv8e 2026-07-20 02:51:46.061714 | debian-bookworm | Installing 'osism.commons:0.20260712.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-07-20 02:51:46.061985 | debian-bookworm | osism.commons:0.20260712.0 was installed successfully 2026-07-20 02:51:46.190640 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-07-20 02:51:46.190816 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-07-20 02:51:46.191684 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-07-20 02:51:46.191724 | debian-bookworm | 2026-07-20 02:51:46.191735 | debian-bookworm | DETAILS 2026-07-20 02:51:46.191815 | debian-bookworm | delegated > dependency: Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-07-20 02:51:46.191848 | debian-bookworm | 2026-07-20 02:51:46.192064 | debian-bookworm | SCENARIO RECAP 2026-07-20 02:51:46.192074 | debian-bookworm | delegated : actions=1 successful=0 disabled=0 skipped=0 missing=1 failed=0 2026-07-20 02:51:46.192081 | debian-bookworm | 2026-07-20 02:51:47.352406 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260712.0 2026-07-20 02:51:47.352535 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260712.0' from Ansible Galaxy 2026-07-20 02:51:48.511817 | ubuntu-noble | Validating downloaded file hash 35b9909f5629f2c3887ea082fabdacce386e6921aacb19a4617336dec0edfc3c with expected hash 35b9909f5629f2c3887ea082fabdacce386e6921aacb19a4617336dec0edfc3c 2026-07-20 02:51:48.512453 | ubuntu-noble | Collection 'osism.commons:0.20260712.0' obtained from server default https://galaxy.ansible.com/api/ 2026-07-20 02:51:48.685716 | ubuntu-noble | Starting galaxy collection install process 2026-07-20 02:51:48.686423 | ubuntu-noble | Process install dependency map 2026-07-20 02:51:48.686749 | ubuntu-noble | Starting collection install process 2026-07-20 02:51:48.687069 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-07-20 02:51:48.688345 | ubuntu-noble | 'community.docker:4.8.5' is already installed, skipping. 2026-07-20 02:51:48.688373 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-07-20 02:51:48.688383 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-07-20 02:51:48.688394 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260712.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1763bf6jrbt1/tmpcop231bm/osism-commons-0.20260712.0-c1hbzoq3 2026-07-20 02:51:48.688720 | ubuntu-noble | Installing 'osism.commons:0.20260712.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-07-20 02:51:48.689036 | ubuntu-noble | osism.commons:0.20260712.0 was installed successfully 2026-07-20 02:51:48.762856 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-07-20 02:51:48.763350 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-07-20 02:51:48.764199 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-07-20 02:51:48.764390 | ubuntu-noble | 2026-07-20 02:51:48.764445 | ubuntu-noble | DETAILS 2026-07-20 02:51:48.764569 | ubuntu-noble | delegated > dependency: Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-07-20 02:51:48.764635 | ubuntu-noble | 2026-07-20 02:51:48.764882 | ubuntu-noble | SCENARIO RECAP 2026-07-20 02:51:48.764926 | ubuntu-noble | delegated : actions=1 successful=0 disabled=0 skipped=0 missing=1 failed=0 2026-07-20 02:51:48.764940 | ubuntu-noble | 2026-07-20 02:51:48.986153 | debian-bookworm | ok: Runtime: 0:00:06.530251 2026-07-20 02:51:48.994720 | ubuntu-noble | ok: Runtime: 0:00:09.065244 2026-07-20 02:51:49.005431 | 2026-07-20 02:51:49.005556 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-07-20 02:51:49.586763 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:51:49.588286 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:51:49.604408 | 2026-07-20 02:51:49.604601 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-07-20 02:51:50.279893 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:51:50.291127 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:50.289783 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:51:50.304345 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:50.780839 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:50.781479 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:51:50.802501 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:51:50.808143 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-07-20 02:51:50.808214 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:51:50.805670 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:51:50.806340 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:51:50.829997 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:51:50.836192 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-07-20 02:51:50.836232 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:51:52.096449 | debian-bookworm | INFO [delegated > prepare] Executing 2026-07-20 02:51:52.155352 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-07-20 02:51:52.444682 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-07-20 02:51:52.444750 | debian-bookworm | config file = None 2026-07-20 02:51:52.444768 | debian-bookworm | configured module search path = 2026-07-20 02:51:52.444773 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-07-20 02:51:52.444782 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-07-20 02:51:52.444787 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-07-20 02:51:52.444791 | debian-bookworm | python version = 3.11.2 (main, May 12 2026, 05:17:27) (/home/zuul/venv/bin/python3) 2026-07-20 02:51:52.444795 | debian-bookworm | jinja version = 3.1.6 2026-07-20 02:51:52.444799 | debian-bookworm | libyaml = True 2026-07-20 02:51:52.444912 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:51:52.444918 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:51:52.444923 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:51:52.444927 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:51:52.444931 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:51:52.444935 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-07-20 02:51:52.444939 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:51:52.444943 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-07-20 02:51:52.444947 | debian-bookworm | 2026-07-20 02:51:52.445134 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:51:52.445140 | debian-bookworm | MOLECULE_DEBUG: True 2026-07-20 02:51:52.445144 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:51:52.445148 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-07-20 02:51:52.445152 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:51:52.445156 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:51:52.445160 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:51:52.445164 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:51:52.445168 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:51:52.445173 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:51:52.445177 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:51:52.445181 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:51:52.445185 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:51:52.445188 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:51:52.445192 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:51:52.445196 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:51:52.445200 | debian-bookworm | 2026-07-20 02:51:52.445563 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:51:52.503770 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-07-20 02:51:52.503840 | ubuntu-noble | config file = None 2026-07-20 02:51:52.503872 | ubuntu-noble | configured module search path = 2026-07-20 02:51:52.503886 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-07-20 02:51:52.503899 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-07-20 02:51:52.503909 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-07-20 02:51:52.503920 | ubuntu-noble | python version = 3.12.3 (main, Jun 19 2026, 12:46:00) (/home/zuul/venv/bin/python3) 2026-07-20 02:51:52.503930 | ubuntu-noble | jinja version = 3.1.6 2026-07-20 02:51:52.503940 | ubuntu-noble | libyaml = True 2026-07-20 02:51:52.504497 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:51:52.504530 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:51:52.504542 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:51:52.504553 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:51:52.504563 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:51:52.504573 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-07-20 02:51:52.504583 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:51:52.504593 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-07-20 02:51:52.504604 | ubuntu-noble | 2026-07-20 02:51:52.504911 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:51:52.504931 | ubuntu-noble | MOLECULE_DEBUG: True 2026-07-20 02:51:52.504941 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:51:52.504951 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-07-20 02:51:52.504961 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:51:52.504972 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:51:52.504982 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:51:52.504992 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:51:52.505001 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:51:52.505012 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:51:52.505022 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:51:52.505031 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:51:52.505041 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:51:52.505051 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:51:52.505061 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:51:52.505071 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:51:52.505082 | ubuntu-noble | 2026-07-20 02:51:52.505560 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:51:52.732751 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-07-20 02:51:53.014573 | debian-bookworm | 2026-07-20 02:51:53.015019 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-07-20 02:51:53.015730 | debian-bookworm | 2026-07-20 02:51:53.016127 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-07-20 02:51:52.809276 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-07-20 02:51:53.065996 | ubuntu-noble | 2026-07-20 02:51:53.066064 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-07-20 02:51:53.067515 | ubuntu-noble | 2026-07-20 02:51:53.067691 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-07-20 02:51:54.168942 | debian-bookworm | ok: [molecule-auditd] 2026-07-20 02:51:54.169043 | debian-bookworm | 2026-07-20 02:51:54.169202 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-07-20 02:51:54.280902 | ubuntu-noble | ok: [molecule-auditd] 2026-07-20 02:51:54.281040 | ubuntu-noble | 2026-07-20 02:51:54.281216 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-07-20 02:51:58.828253 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.2.0-py3-none-any.whl (148 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 148.8/148.8 kB 2.8 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.9)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nInstalling collected packages: docker\nSuccessfully installed docker-7.2.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.2.0-py3-none-any.whl (148 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 148.8/148.8 kB 2.8 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.9)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Installing collected packages: docker", "Successfully installed docker-7.2.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.828683 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 24.5 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 24.5 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.828940 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.9)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.9)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.829125 | debian-bookworm | 2026-07-20 02:51:58.829416 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-07-20 02:51:58.849060 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-07-20 02:51:58.849582 | debian-bookworm | 2026-07-20 02:51:58.849821 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-07-20 02:51:58.850032 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-07-20 02:51:58.850236 | debian-bookworm | 2026-07-20 02:51:58.950546 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-07-20 02:51:58.950829 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-07-20 02:51:58.950865 | debian-bookworm | 2026-07-20 02:51:58.950882 | debian-bookworm | DETAILS 2026-07-20 02:51:58.950904 | debian-bookworm | delegated > prepare: Executed: Successful 2026-07-20 02:51:58.950915 | debian-bookworm | 2026-07-20 02:51:58.951004 | debian-bookworm | SCENARIO RECAP 2026-07-20 02:51:58.951016 | debian-bookworm | delegated : actions=1 successful=1 disabled=0 skipped=0 missing=0 failed=0 2026-07-20 02:51:58.951025 | debian-bookworm | 2026-07-20 02:51:58.896363 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.2.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.9)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nDownloading docker-7.2.0-py3-none-any.whl (148 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 148.8/148.8 kB 4.2 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.2.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.2.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.9)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Downloading docker-7.2.0-py3-none-any.whl (148 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 148.8/148.8 kB 4.2 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.2.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.896440 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 23.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 23.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.896461 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.9)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.9)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-07-20 02:51:58.896466 | ubuntu-noble | 2026-07-20 02:51:58.896471 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-07-20 02:51:58.913342 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-07-20 02:51:58.913380 | ubuntu-noble | 2026-07-20 02:51:58.913387 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-07-20 02:51:58.913393 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-07-20 02:51:58.913402 | ubuntu-noble | 2026-07-20 02:51:58.996993 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-07-20 02:51:58.997800 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-07-20 02:51:58.997863 | ubuntu-noble | 2026-07-20 02:51:58.997870 | ubuntu-noble | DETAILS 2026-07-20 02:51:58.997956 | ubuntu-noble | delegated > prepare: Executed: Successful 2026-07-20 02:51:58.997962 | ubuntu-noble | 2026-07-20 02:51:58.998149 | ubuntu-noble | SCENARIO RECAP 2026-07-20 02:51:58.998165 | ubuntu-noble | delegated : actions=1 successful=1 disabled=0 skipped=0 missing=0 failed=0 2026-07-20 02:51:58.998170 | ubuntu-noble | 2026-07-20 02:51:59.186915 | debian-bookworm | ok: Runtime: 0:00:09.080335 2026-07-20 02:51:59.198247 | ubuntu-noble | ok: Runtime: 0:00:09.114355 2026-07-20 02:51:59.208564 | 2026-07-20 02:51:59.208685 | TASK [ansible-molecule : Reset connection] 2026-07-20 02:51:59.251329 | 2026-07-20 02:51:59.251492 | TASK [ansible-molecule : Reset connection] 2026-07-20 02:51:59.296627 | 2026-07-20 02:51:59.296853 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-07-20 02:52:00.125913 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:52:00.136744 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:00.223922 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:52:00.233478 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:00.639688 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:00.640279 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:52:00.661928 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:52:00.667819 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-07-20 02:52:00.667932 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:52:00.747854 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:00.748579 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:52:00.770816 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:52:00.776484 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-07-20 02:52:00.776560 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:52:01.911033 | debian-bookworm | INFO [delegated > dependency] Executing 2026-07-20 02:52:01.911480 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-07-20 02:52:02.278360 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-07-20 02:52:02.278797 | debian-bookworm | config file = None 2026-07-20 02:52:02.279234 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-07-20 02:52:02.279751 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-07-20 02:52:02.280166 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-07-20 02:52:02.280502 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-07-20 02:52:02.280821 | debian-bookworm | python version = 3.11.2 (main, May 12 2026, 05:17:27) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-07-20 02:52:02.281207 | debian-bookworm | jinja version = 3.1.6 2026-07-20 02:52:02.281505 | debian-bookworm | libyaml = True 2026-07-20 02:52:02.281803 | debian-bookworm | No config file found; using defaults 2026-07-20 02:52:02.282299 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-07-20 02:52:02.287144 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-07-20 02:52:02.287635 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-07-20 02:52:02.288033 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-07-20 02:52:02.288449 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-07-20 02:52:02.289076 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-07-20 02:52:02.289531 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-07-20 02:52:02.289931 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-07-20 02:52:02.290338 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-07-20 02:52:02.290708 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-07-20 02:52:02.291086 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-07-20 02:52:02.291392 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-07-20 02:52:02.291821 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-07-20 02:52:02.292248 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-07-20 02:52:02.292532 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-07-20 02:52:02.294056 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-07-20 02:52:02.294510 | debian-bookworm | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-07-20 02:52:02.295313 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-07-20 02:52:02.295629 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-07-20 02:52:02.300708 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-07-20 02:52:02.301249 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-07-20 02:52:02.301559 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-07-20 02:52:02.301971 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-07-20 02:52:02.302422 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-07-20 02:52:02.302715 | debian-bookworm | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-07-20 02:52:02.303000 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-07-20 02:52:02.303309 | debian-bookworm | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-07-20 02:52:02.304243 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-07-20 02:52:02.304585 | debian-bookworm | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-07-20 02:52:02.304917 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-07-20 02:52:02.305277 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-07-20 02:52:02.305994 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-07-20 02:52:02.306764 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-07-20 02:52:02.307175 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-07-20 02:52:02.307445 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-07-20 02:52:02.307840 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-07-20 02:52:02.308122 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-07-20 02:52:02.308478 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-07-20 02:52:02.308733 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-07-20 02:52:02.309067 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-07-20 02:52:02.309389 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-07-20 02:52:02.309721 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-07-20 02:52:02.309929 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-07-20 02:52:02.310217 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-07-20 02:52:02.310423 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-07-20 02:52:02.310834 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-07-20 02:52:02.311077 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-07-20 02:52:02.312377 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-07-20 02:52:02.312706 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-07-20 02:52:02.313039 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-07-20 02:52:02.313295 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-07-20 02:52:02.313613 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-07-20 02:52:02.313901 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-07-20 02:52:02.314213 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-07-20 02:52:02.314538 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-07-20 02:52:02.316869 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-07-20 02:52:02.317259 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-07-20 02:52:02.317716 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-07-20 02:52:02.318025 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-07-20 02:52:02.318827 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-07-20 02:52:02.319060 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-07-20 02:52:02.321606 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-07-20 02:52:02.321900 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-07-20 02:52:02.322249 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-07-20 02:52:02.322584 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-07-20 02:52:02.328089 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-07-20 02:52:02.328489 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-07-20 02:52:02.328852 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-07-20 02:52:02.329144 | debian-bookworm | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-07-20 02:52:02.329483 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-07-20 02:52:02.329733 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-07-20 02:52:02.330191 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-07-20 02:52:02.330438 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-07-20 02:52:02.330724 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-07-20 02:52:02.331001 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-07-20 02:52:02.138602 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-07-20 02:52:02.139118 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-07-20 02:52:02.340013 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-07-20 02:52:02.340605 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-07-20 02:52:02.341860 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-07-20 02:52:02.342268 | debian-bookworm | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-07-20 02:52:02.343091 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-07-20 02:52:02.343473 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-07-20 02:52:02.344637 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-07-20 02:52:02.344956 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-07-20 02:52:02.345325 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-07-20 02:52:02.345905 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-07-20 02:52:02.346229 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-07-20 02:52:02.346489 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-07-20 02:52:02.349828 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-07-20 02:52:02.350081 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-07-20 02:52:02.350354 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-07-20 02:52:02.350736 | debian-bookworm | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-07-20 02:52:02.351225 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-07-20 02:52:02.351598 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-07-20 02:52:02.351889 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-07-20 02:52:02.352231 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-07-20 02:52:02.352478 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-07-20 02:52:02.352724 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-07-20 02:52:02.353035 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-07-20 02:52:02.353350 | debian-bookworm | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-07-20 02:52:02.354414 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-07-20 02:52:02.354665 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-07-20 02:52:02.354915 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-07-20 02:52:02.356022 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-07-20 02:52:02.356566 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-07-20 02:52:02.357161 | debian-bookworm | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-07-20 02:52:02.392037 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-07-20 02:52:02.392616 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-07-20 02:52:02.393495 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-07-20 02:52:02.393920 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-07-20 02:52:02.395366 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-07-20 02:52:02.395887 | debian-bookworm | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-07-20 02:52:02.396259 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-07-20 02:52:02.396635 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-07-20 02:52:02.397253 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-07-20 02:52:02.397641 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-07-20 02:52:02.398014 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-07-20 02:52:02.398403 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-07-20 02:52:02.398889 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-07-20 02:52:02.399360 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-07-20 02:52:02.400771 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-07-20 02:52:02.401149 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-07-20 02:52:02.401549 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-07-20 02:52:02.401881 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-07-20 02:52:02.402282 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-07-20 02:52:02.402610 | debian-bookworm | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-07-20 02:52:02.404297 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-07-20 02:52:02.404629 | debian-bookworm | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-07-20 02:52:02.404960 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-07-20 02:52:02.405311 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-07-20 02:52:02.405636 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-07-20 02:52:02.405962 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-07-20 02:52:02.406528 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-07-20 02:52:02.406862 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-07-20 02:52:02.407223 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-07-20 02:52:02.407585 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-07-20 02:52:02.408668 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-07-20 02:52:02.408992 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-07-20 02:52:02.409349 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-07-20 02:52:02.409696 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-07-20 02:52:02.410042 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-07-20 02:52:02.410320 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-07-20 02:52:02.410650 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-07-20 02:52:02.410909 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-07-20 02:52:02.411471 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-07-20 02:52:02.411864 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-07-20 02:52:02.412253 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-07-20 02:52:02.412508 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-07-20 02:52:02.413013 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-07-20 02:52:02.413343 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-07-20 02:52:02.413972 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-07-20 02:52:02.414291 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-07-20 02:52:02.414522 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-07-20 02:52:02.414792 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-07-20 02:52:02.415023 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-07-20 02:52:02.415315 | debian-bookworm | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-07-20 02:52:02.416857 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-07-20 02:52:02.417166 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-07-20 02:52:02.417847 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-07-20 02:52:02.418146 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-07-20 02:52:02.418665 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-07-20 02:52:02.418950 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-07-20 02:52:02.419326 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-07-20 02:52:02.419665 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-07-20 02:52:02.420042 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-07-20 02:52:02.420283 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-07-20 02:52:02.420686 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-07-20 02:52:02.420968 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-07-20 02:52:02.421259 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-07-20 02:52:02.421651 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-07-20 02:52:02.422485 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-07-20 02:52:02.422784 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-07-20 02:52:02.422967 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-07-20 02:52:02.423291 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-07-20 02:52:02.423809 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-07-20 02:52:02.424089 | debian-bookworm | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-07-20 02:52:02.424485 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-07-20 02:52:02.424754 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-07-20 02:52:02.425203 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-07-20 02:52:02.425480 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-07-20 02:52:02.425751 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-07-20 02:52:02.426019 | debian-bookworm | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-07-20 02:52:02.426241 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-07-20 02:52:02.426543 | debian-bookworm | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-07-20 02:52:02.426962 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-07-20 02:52:02.427259 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-07-20 02:52:02.427563 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-07-20 02:52:02.427823 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-07-20 02:52:02.427989 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-07-20 02:52:02.428366 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-07-20 02:52:02.429342 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-07-20 02:52:02.429680 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-07-20 02:52:02.429847 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-07-20 02:52:02.430205 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-07-20 02:52:02.430552 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-07-20 02:52:02.430837 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-07-20 02:52:02.431088 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-07-20 02:52:02.431409 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-07-20 02:52:02.435848 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-07-20 02:52:02.437570 | debian-bookworm | Found installed collection osism.commons:0.20260712.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-07-20 02:52:02.438847 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-07-20 02:52:02.439187 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-07-20 02:52:02.439906 | debian-bookworm | Starting galaxy collection install process 2026-07-20 02:52:02.440014 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-07-20 02:52:02.513130 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-07-20 02:52:02.515775 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-07-20 02:52:02.525538 | debian-bookworm | INFO [delegated > create] Executing 2026-07-20 02:52:02.527695 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-07-20 02:52:02.536017 | debian-bookworm | INFO [delegated > prepare] Executing 2026-07-20 02:52:02.536172 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-07-20 02:52:02.536279 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-07-20 02:52:02.544456 | debian-bookworm | INFO [delegated > converge] Executing 2026-07-20 02:52:02.531345 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-07-20 02:52:02.531385 | ubuntu-noble | config file = None 2026-07-20 02:52:02.531394 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-07-20 02:52:02.531612 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-07-20 02:52:02.531969 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-07-20 02:52:02.532368 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-07-20 02:52:02.532686 | ubuntu-noble | python version = 3.12.3 (main, Jun 19 2026, 12:46:00) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-07-20 02:52:02.532977 | ubuntu-noble | jinja version = 3.1.6 2026-07-20 02:52:02.533283 | ubuntu-noble | libyaml = True 2026-07-20 02:52:02.533602 | ubuntu-noble | No config file found; using defaults 2026-07-20 02:52:02.534116 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-07-20 02:52:02.545651 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-07-20 02:52:02.547388 | ubuntu-noble | Found installed collection osism.commons:0.20260712.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-07-20 02:52:02.548872 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-07-20 02:52:02.549276 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-07-20 02:52:02.559991 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-07-20 02:52:02.560350 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-07-20 02:52:02.560667 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-07-20 02:52:02.561087 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-07-20 02:52:02.563708 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-07-20 02:52:02.564273 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-07-20 02:52:02.564660 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-07-20 02:52:02.564994 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-07-20 02:52:02.565490 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-07-20 02:52:02.565797 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-07-20 02:52:02.566258 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-07-20 02:52:02.568323 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-07-20 02:52:02.568350 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-07-20 02:52:02.568354 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-07-20 02:52:02.568358 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-07-20 02:52:02.568362 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-07-20 02:52:02.568623 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-07-20 02:52:02.569041 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-07-20 02:52:02.570094 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-07-20 02:52:02.570449 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-07-20 02:52:02.570745 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-07-20 02:52:02.571033 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-07-20 02:52:02.571843 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-07-20 02:52:02.572212 | ubuntu-noble | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-07-20 02:52:02.573116 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-07-20 02:52:02.573832 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-07-20 02:52:02.574221 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-07-20 02:52:02.574584 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-07-20 02:52:02.574832 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-07-20 02:52:02.575174 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-07-20 02:52:02.575570 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-07-20 02:52:02.575897 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-07-20 02:52:02.576273 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-07-20 02:52:02.576628 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-07-20 02:52:02.577786 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-07-20 02:52:02.578072 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-07-20 02:52:02.580329 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-07-20 02:52:02.581210 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-07-20 02:52:02.581232 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-07-20 02:52:02.581366 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-07-20 02:52:02.582663 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-07-20 02:52:02.583494 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-07-20 02:52:02.644018 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-07-20 02:52:02.644528 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-07-20 02:52:02.644896 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-07-20 02:52:02.645428 | ubuntu-noble | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-07-20 02:52:02.645754 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-07-20 02:52:02.646205 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-07-20 02:52:02.646567 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-07-20 02:52:02.646887 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-07-20 02:52:02.647584 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-07-20 02:52:02.647933 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-07-20 02:52:02.648803 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-07-20 02:52:02.649211 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-07-20 02:52:02.649598 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-07-20 02:52:02.649951 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-07-20 02:52:02.650351 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-07-20 02:52:02.650703 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-07-20 02:52:02.651052 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-07-20 02:52:02.652322 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-07-20 02:52:02.652347 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-07-20 02:52:02.652351 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-07-20 02:52:02.653945 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-07-20 02:52:02.654336 | ubuntu-noble | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-07-20 02:52:02.656380 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-07-20 02:52:02.656699 | ubuntu-noble | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-07-20 02:52:02.657653 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-07-20 02:52:02.657963 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-07-20 02:52:02.661749 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-07-20 02:52:02.662131 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-07-20 02:52:02.662878 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-07-20 02:52:02.663317 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-07-20 02:52:02.663757 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-07-20 02:52:02.664118 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-07-20 02:52:02.664582 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-07-20 02:52:02.664990 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-07-20 02:52:02.665512 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-07-20 02:52:02.665969 | ubuntu-noble | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-07-20 02:52:02.666583 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-07-20 02:52:02.667004 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-07-20 02:52:02.670232 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-07-20 02:52:02.670541 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-07-20 02:52:02.671480 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-07-20 02:52:02.673328 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-07-20 02:52:02.673351 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-07-20 02:52:02.673356 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-07-20 02:52:02.673360 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-07-20 02:52:02.673363 | ubuntu-noble | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-07-20 02:52:02.673435 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-07-20 02:52:02.673749 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-07-20 02:52:02.674039 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-07-20 02:52:02.674379 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-07-20 02:52:02.674714 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-07-20 02:52:02.675107 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-07-20 02:52:02.678381 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-07-20 02:52:02.678641 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-07-20 02:52:02.679703 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-07-20 02:52:02.680022 | ubuntu-noble | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-07-20 02:52:02.680413 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-07-20 02:52:02.680672 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-07-20 02:52:02.682429 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-07-20 02:52:02.682773 | ubuntu-noble | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-07-20 02:52:02.683013 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-07-20 02:52:02.683306 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-07-20 02:52:02.683867 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-07-20 02:52:02.684252 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-07-20 02:52:02.684679 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-07-20 02:52:02.684945 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-07-20 02:52:02.685315 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-07-20 02:52:02.685655 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-07-20 02:52:02.691666 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-07-20 02:52:02.692020 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-07-20 02:52:02.692794 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-07-20 02:52:02.693118 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-07-20 02:52:02.694955 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-07-20 02:52:02.695318 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-07-20 02:52:02.695838 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-07-20 02:52:02.696196 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-07-20 02:52:02.696548 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-07-20 02:52:02.696861 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-07-20 02:52:02.697081 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-07-20 02:52:02.697449 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-07-20 02:52:02.697935 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-07-20 02:52:02.698245 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-07-20 02:52:02.698757 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-07-20 02:52:02.699045 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-07-20 02:52:02.699356 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-07-20 02:52:02.700399 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-07-20 02:52:02.700911 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-07-20 02:52:02.701346 | ubuntu-noble | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-07-20 02:52:02.702603 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-07-20 02:52:02.703037 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-07-20 02:52:02.704268 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-07-20 02:52:02.704699 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-07-20 02:52:02.705092 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-07-20 02:52:02.705460 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-07-20 02:52:02.707385 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-07-20 02:52:02.707451 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-07-20 02:52:02.707466 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-07-20 02:52:02.707477 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-07-20 02:52:02.717365 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-07-20 02:52:02.717423 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-07-20 02:52:02.717435 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-07-20 02:52:02.717503 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-07-20 02:52:02.717869 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-07-20 02:52:02.718135 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-07-20 02:52:02.718525 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-07-20 02:52:02.718800 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-07-20 02:52:02.719125 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-07-20 02:52:02.719469 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-07-20 02:52:02.719813 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-07-20 02:52:02.720326 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-07-20 02:52:02.720686 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-07-20 02:52:02.720990 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-07-20 02:52:02.721261 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-07-20 02:52:02.721510 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-07-20 02:52:02.721734 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-07-20 02:52:02.722017 | ubuntu-noble | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-07-20 02:52:02.723609 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-07-20 02:52:02.723903 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-07-20 02:52:02.724225 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-07-20 02:52:02.724553 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-07-20 02:52:02.725325 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-07-20 02:52:02.725347 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-07-20 02:52:02.725368 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-07-20 02:52:02.725704 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-07-20 02:52:02.726030 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-07-20 02:52:02.726334 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-07-20 02:52:02.726941 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-07-20 02:52:02.727336 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-07-20 02:52:02.727676 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-07-20 02:52:02.728019 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-07-20 02:52:02.728395 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-07-20 02:52:02.728749 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-07-20 02:52:02.729661 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-07-20 02:52:02.731338 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-07-20 02:52:02.731374 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-07-20 02:52:02.731386 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-07-20 02:52:02.731397 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-07-20 02:52:02.731732 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-07-20 02:52:02.732275 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-07-20 02:52:02.732707 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-07-20 02:52:02.733062 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-07-20 02:52:02.733467 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-07-20 02:52:02.735682 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-07-20 02:52:02.736097 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-07-20 02:52:02.736588 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-07-20 02:52:02.736946 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-07-20 02:52:02.737405 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-07-20 02:52:02.737750 | ubuntu-noble | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-07-20 02:52:02.738062 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-07-20 02:52:02.738536 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-07-20 02:52:02.738861 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-07-20 02:52:02.739320 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-07-20 02:52:02.739602 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-07-20 02:52:02.739935 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-07-20 02:52:02.740310 | ubuntu-noble | Starting galaxy collection install process 2026-07-20 02:52:02.740610 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-07-20 02:52:02.811164 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-07-20 02:52:02.813367 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-07-20 02:52:02.831693 | ubuntu-noble | INFO [delegated > create] Executing 2026-07-20 02:52:02.834703 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-07-20 02:52:02.845028 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-07-20 02:52:02.845123 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-07-20 02:52:02.845270 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-07-20 02:52:02.853591 | ubuntu-noble | INFO [delegated > converge] Executing 2026-07-20 02:52:02.902640 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-07-20 02:52:02.902742 | debian-bookworm | config file = None 2026-07-20 02:52:02.902759 | debian-bookworm | configured module search path = 2026-07-20 02:52:02.902772 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-07-20 02:52:02.902785 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-07-20 02:52:02.902796 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-07-20 02:52:02.902808 | debian-bookworm | python version = 3.11.2 (main, May 12 2026, 05:17:27) (/home/zuul/venv/bin/python3) 2026-07-20 02:52:02.902820 | debian-bookworm | jinja version = 3.1.6 2026-07-20 02:52:02.902831 | debian-bookworm | libyaml = True 2026-07-20 02:52:02.902843 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:52:02.902854 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:52:02.902866 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:52:02.902877 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:52:02.902888 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:52:02.902899 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-07-20 02:52:02.902911 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:52:02.902922 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-07-20 02:52:02.902934 | debian-bookworm | 2026-07-20 02:52:02.902945 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:52:02.902956 | debian-bookworm | MOLECULE_DEBUG: True 2026-07-20 02:52:02.902967 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:52:02.903014 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-07-20 02:52:02.903027 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:52:02.903038 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:52:02.903053 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:52:02.903064 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:52:02.903075 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:52:02.903158 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:52:02.903171 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:52:02.903183 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:52:02.903194 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:52:02.903223 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:52:02.903235 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:52:02.903247 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:02.903259 | debian-bookworm | 2026-07-20 02:52:02.903274 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:03.188667 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-07-20 02:52:03.226762 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-07-20 02:52:03.226834 | ubuntu-noble | config file = None 2026-07-20 02:52:03.226840 | ubuntu-noble | configured module search path = 2026-07-20 02:52:03.226844 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-07-20 02:52:03.226849 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-07-20 02:52:03.226853 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-07-20 02:52:03.226857 | ubuntu-noble | python version = 3.12.3 (main, Jun 19 2026, 12:46:00) (/home/zuul/venv/bin/python3) 2026-07-20 02:52:03.226860 | ubuntu-noble | jinja version = 3.1.6 2026-07-20 02:52:03.226864 | ubuntu-noble | libyaml = True 2026-07-20 02:52:03.227174 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:52:03.227182 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:52:03.227190 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:52:03.227193 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:52:03.227197 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:52:03.227201 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-07-20 02:52:03.227204 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:52:03.227208 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-07-20 02:52:03.227214 | ubuntu-noble | 2026-07-20 02:52:03.227500 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:52:03.227508 | ubuntu-noble | MOLECULE_DEBUG: True 2026-07-20 02:52:03.227512 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:52:03.227531 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-07-20 02:52:03.227543 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:52:03.227547 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:52:03.227551 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:52:03.227554 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:52:03.227557 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:52:03.227561 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:52:03.227564 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:52:03.227568 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:52:03.227571 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:52:03.227575 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:52:03.227578 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:52:03.227581 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:03.227585 | ubuntu-noble | 2026-07-20 02:52:03.227853 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:03.438199 | debian-bookworm | 2026-07-20 02:52:03.438279 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-07-20 02:52:03.438295 | debian-bookworm | 2026-07-20 02:52:03.438308 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-07-20 02:52:03.537348 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-07-20 02:52:03.779999 | ubuntu-noble | 2026-07-20 02:52:03.780547 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-07-20 02:52:03.780906 | ubuntu-noble | 2026-07-20 02:52:03.782562 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-07-20 02:52:04.586717 | debian-bookworm | ok: [molecule-auditd] 2026-07-20 02:52:04.586818 | debian-bookworm | 2026-07-20 02:52:04.586827 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-07-20 02:52:04.616867 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-07-20 02:52:04.616916 | debian-bookworm | 2026-07-20 02:52:04.616922 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-07-20 02:52:04.670279 | debian-bookworm | included: auditd for molecule-auditd 2026-07-20 02:52:04.670354 | debian-bookworm | 2026-07-20 02:52:04.670367 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-07-20 02:52:04.699559 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-07-20 02:52:04.700421 | debian-bookworm | 2026-07-20 02:52:04.701155 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-07-20 02:52:05.051531 | ubuntu-noble | ok: [molecule-auditd] 2026-07-20 02:52:05.052007 | ubuntu-noble | 2026-07-20 02:52:05.052493 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-07-20 02:52:05.088173 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-07-20 02:52:05.088222 | ubuntu-noble | 2026-07-20 02:52:05.088230 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-07-20 02:52:05.149654 | ubuntu-noble | included: auditd for molecule-auditd 2026-07-20 02:52:05.150753 | ubuntu-noble | 2026-07-20 02:52:05.150941 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-07-20 02:52:05.193735 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-07-20 02:52:05.193889 | ubuntu-noble | 2026-07-20 02:52:05.194079 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-07-20 02:52:09.045808 | debian-bookworm | The following additional packages will be installed: 2026-07-20 02:52:09.045862 | debian-bookworm | libauparse0 2026-07-20 02:52:09.045870 | debian-bookworm | Suggested packages: 2026-07-20 02:52:09.045877 | debian-bookworm | audispd-plugins 2026-07-20 02:52:09.045883 | debian-bookworm | The following NEW packages will be installed: 2026-07-20 02:52:09.045890 | debian-bookworm | auditd libauparse0 2026-07-20 02:52:09.045896 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-07-20 02:52:09.045965 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1784515836, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3258 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28692 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3258 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28692 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-07-20 02:52:09.046037 | debian-bookworm | 2026-07-20 02:52:09.046044 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-07-20 02:52:09.948801 | ubuntu-noble | The following additional packages will be installed: 2026-07-20 02:52:09.950307 | ubuntu-noble | libauparse0t64 2026-07-20 02:52:09.950325 | ubuntu-noble | Suggested packages: 2026-07-20 02:52:09.950330 | ubuntu-noble | audispd-plugins 2026-07-20 02:52:09.950333 | ubuntu-noble | The following NEW packages will be installed: 2026-07-20 02:52:09.950338 | ubuntu-noble | auditd libauparse0t64 2026-07-20 02:52:09.950341 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-07-20 02:52:09.951330 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1784515838, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (1075 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36098 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (1075 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36098 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-07-20 02:52:09.951515 | ubuntu-noble | 2026-07-20 02:52:09.951653 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-07-20 02:52:11.941389 | debian-bookworm | The following NEW packages will be installed: 2026-07-20 02:52:11.941447 | debian-bookworm | audispd-plugins 2026-07-20 02:52:11.941459 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-07-20 02:52:11.941471 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1784515836, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (950 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28783 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (950 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28783 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-07-20 02:52:11.941482 | debian-bookworm | 2026-07-20 02:52:11.941490 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-07-20 02:52:13.127552 | debian-bookworm | --- before 2026-07-20 02:52:13.127606 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2198lkl_1ees/tmpmtb3xukg/auditd.conf.j2 2026-07-20 02:52:13.127614 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-07-20 02:52:13.127620 | debian-bookworm | +# 2026-07-20 02:52:13.127626 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-07-20 02:52:13.127632 | debian-bookworm | +# 2026-07-20 02:52:13.127637 | debian-bookworm | + 2026-07-20 02:52:13.127642 | debian-bookworm | +local_events = yes 2026-07-20 02:52:13.127650 | debian-bookworm | +write_logs = yes 2026-07-20 02:52:13.127659 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-07-20 02:52:13.127667 | debian-bookworm | +log_group = adm 2026-07-20 02:52:13.127675 | debian-bookworm | +log_format = RAW 2026-07-20 02:52:13.127683 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-07-20 02:52:13.127692 | debian-bookworm | +freq = 50 2026-07-20 02:52:13.127699 | debian-bookworm | +max_log_file = 8 2026-07-20 02:52:13.127706 | debian-bookworm | +num_logs = 5 2026-07-20 02:52:13.127714 | debian-bookworm | +priority_boost = 4 2026-07-20 02:52:13.127722 | debian-bookworm | +disp_qos = lossy 2026-07-20 02:52:13.127729 | debian-bookworm | +dispatcher = /sbin/audispd 2026-07-20 02:52:13.127737 | debian-bookworm | +name_format = NONE 2026-07-20 02:52:13.127745 | debian-bookworm | +##name = mydomain 2026-07-20 02:52:13.127753 | debian-bookworm | +max_log_file_action = ROTATE 2026-07-20 02:52:13.127761 | debian-bookworm | +space_left = 12361 2026-07-20 02:52:13.127769 | debian-bookworm | +space_left_action = email 2026-07-20 02:52:13.127776 | debian-bookworm | +verify_email = yes 2026-07-20 02:52:13.127784 | debian-bookworm | +action_mail_acct = root 2026-07-20 02:52:13.127792 | debian-bookworm | +admin_space_left = 50 2026-07-20 02:52:13.127801 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-07-20 02:52:13.127809 | debian-bookworm | +disk_full_action = SUSPEND 2026-07-20 02:52:13.127817 | debian-bookworm | +disk_error_action = SUSPEND 2026-07-20 02:52:13.127826 | debian-bookworm | +use_libwrap = yes 2026-07-20 02:52:13.127834 | debian-bookworm | +##tcp_listen_port = 60 2026-07-20 02:52:13.127842 | debian-bookworm | +tcp_listen_queue = 5 2026-07-20 02:52:13.127850 | debian-bookworm | +tcp_max_per_addr = 1 2026-07-20 02:52:13.127858 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-07-20 02:52:13.127867 | debian-bookworm | +tcp_client_max_idle = 0 2026-07-20 02:52:13.127875 | debian-bookworm | +enable_krb5 = no 2026-07-20 02:52:13.127883 | debian-bookworm | +krb5_principal = auditd 2026-07-20 02:52:13.127937 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-07-20 02:52:13.127945 | debian-bookworm | +distribute_network = no 2026-07-20 02:52:13.127950 | debian-bookworm | 2026-07-20 02:52:13.127965 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1784515931.9690697-2568-227771225044194/.source.conf", "state": "file", "uid": 0} 2026-07-20 02:52:13.128173 | debian-bookworm | 2026-07-20 02:52:13.128360 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-07-20 02:52:13.280640 | ubuntu-noble | The following NEW packages will be installed: 2026-07-20 02:52:13.281165 | ubuntu-noble | audispd-plugins 2026-07-20 02:52:13.281619 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-07-20 02:52:13.282154 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1784515838, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (281 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36194 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (281 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36194 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-07-20 02:52:13.282573 | ubuntu-noble | 2026-07-20 02:52:13.282946 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-07-20 02:52:13.546751 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-07-20 02:52:13.546807 | debian-bookworm | 2026-07-20 02:52:13.546816 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-07-20 02:52:14.371549 | debian-bookworm | --- before 2026-07-20 02:52:14.371606 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2198lkl_1ees/tmpptv0l6ke/20-neo23x0.rules.j2 2026-07-20 02:52:14.371616 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-07-20 02:52:14.371624 | debian-bookworm | +# ___ ___ __ __ 2026-07-20 02:52:14.371631 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-07-20 02:52:14.371638 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-07-20 02:52:14.371646 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-07-20 02:52:14.371652 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-07-20 02:52:14.371659 | debian-bookworm | +# 2026-07-20 02:52:14.371666 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-07-20 02:52:14.371673 | debian-bookworm | +# /etc/audit/audit.rules 2026-07-20 02:52:14.371680 | debian-bookworm | +# 2026-07-20 02:52:14.371687 | debian-bookworm | +# Compiled by Florian Roth 2026-07-20 02:52:14.371693 | debian-bookworm | +# 2026-07-20 02:52:14.371700 | debian-bookworm | +# Created : 2017/12/05 2026-07-20 02:52:14.371722 | debian-bookworm | +# Modified : 2023/01/25 2026-07-20 02:52:14.371729 | debian-bookworm | +# 2026-07-20 02:52:14.371736 | debian-bookworm | +# Based on rules published here: 2026-07-20 02:52:14.371742 | debian-bookworm | +# Gov.uk auditd rules 2026-07-20 02:52:14.371948 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-07-20 02:52:14.372272 | debian-bookworm | +# CentOS 7 hardening 2026-07-20 02:52:14.372543 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-07-20 02:52:14.372768 | debian-bookworm | +# Linux audit repo 2026-07-20 02:52:14.373025 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-07-20 02:52:14.373252 | debian-bookworm | +# Auditd high performance linux auditing 2026-07-20 02:52:14.373483 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-07-20 02:52:14.373645 | debian-bookworm | +# 2026-07-20 02:52:14.373806 | debian-bookworm | +# Further rules 2026-07-20 02:52:14.374051 | debian-bookworm | +# For PCI DSS compliance see: 2026-07-20 02:52:14.374302 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-07-20 02:52:14.374521 | debian-bookworm | +# For NISPOM compliance see: 2026-07-20 02:52:14.374745 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-07-20 02:52:14.374923 | debian-bookworm | + 2026-07-20 02:52:14.375085 | debian-bookworm | +# Remove any existing rules 2026-07-20 02:52:14.375241 | debian-bookworm | +-D 2026-07-20 02:52:14.375397 | debian-bookworm | + 2026-07-20 02:52:14.375598 | debian-bookworm | +# Buffer Size 2026-07-20 02:52:14.375764 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-07-20 02:52:14.375970 | debian-bookworm | +-b 8192 2026-07-20 02:52:14.376136 | debian-bookworm | + 2026-07-20 02:52:14.376301 | debian-bookworm | +# Failure Mode 2026-07-20 02:52:14.376449 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-07-20 02:52:14.376591 | debian-bookworm | +-f 1 2026-07-20 02:52:14.376728 | debian-bookworm | + 2026-07-20 02:52:14.376921 | debian-bookworm | +# Ignore errors 2026-07-20 02:52:14.377075 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-07-20 02:52:14.377220 | debian-bookworm | +-i 2026-07-20 02:52:14.377361 | debian-bookworm | + 2026-07-20 02:52:14.377502 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-07-20 02:52:14.377642 | debian-bookworm | + 2026-07-20 02:52:14.377784 | debian-bookworm | +## Audit the audit logs 2026-07-20 02:52:14.377972 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-07-20 02:52:14.378120 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-07-20 02:52:14.378254 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-07-20 02:52:14.378384 | debian-bookworm | + 2026-07-20 02:52:14.378520 | debian-bookworm | +## Auditd configuration 2026-07-20 02:52:14.378655 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-07-20 02:52:14.378791 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-07-20 02:52:14.378992 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-07-20 02:52:14.379136 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-07-20 02:52:14.379267 | debian-bookworm | + 2026-07-20 02:52:14.379403 | debian-bookworm | +## Monitor for use of audit management tools 2026-07-20 02:52:14.379572 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-07-20 02:52:14.379709 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-07-20 02:52:14.379844 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-07-20 02:52:14.380000 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-07-20 02:52:14.380135 | debian-bookworm | + 2026-07-20 02:52:14.380271 | debian-bookworm | +## Access to all audit trails 2026-07-20 02:52:14.380403 | debian-bookworm | + 2026-07-20 02:52:14.380547 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-07-20 02:52:14.380686 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-07-20 02:52:14.380822 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-07-20 02:52:14.381001 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-07-20 02:52:14.381139 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-07-20 02:52:14.381264 | debian-bookworm | + 2026-07-20 02:52:14.381384 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-07-20 02:52:14.381502 | debian-bookworm | + 2026-07-20 02:52:14.381640 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-07-20 02:52:14.381760 | debian-bookworm | + 2026-07-20 02:52:14.381895 | debian-bookworm | +## Ignore SELinux AVC records 2026-07-20 02:52:14.382020 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-07-20 02:52:14.382139 | debian-bookworm | + 2026-07-20 02:52:14.382262 | debian-bookworm | +## Ignore current working directory records 2026-07-20 02:52:14.382388 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-07-20 02:52:14.382507 | debian-bookworm | + 2026-07-20 02:52:14.382632 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-07-20 02:52:14.382756 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-07-20 02:52:14.382917 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-07-20 02:52:14.383047 | debian-bookworm | + 2026-07-20 02:52:14.383172 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-07-20 02:52:14.383298 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-07-20 02:52:14.383415 | debian-bookworm | + 2026-07-20 02:52:14.383558 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-07-20 02:52:14.383676 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-07-20 02:52:14.383785 | debian-bookworm | + 2026-07-20 02:52:14.383912 | debian-bookworm | +## Open VM Tools 2026-07-20 02:52:14.384030 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-07-20 02:52:14.384138 | debian-bookworm | + 2026-07-20 02:52:14.384250 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-07-20 02:52:14.384361 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-07-20 02:52:14.384472 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-07-20 02:52:14.384579 | debian-bookworm | + 2026-07-20 02:52:14.384691 | debian-bookworm | +## FileBeat 2026-07-20 02:52:14.384805 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-07-20 02:52:14.384929 | debian-bookworm | + 2026-07-20 02:52:14.385052 | debian-bookworm | +## More information on how to filter events 2026-07-20 02:52:14.385167 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-07-20 02:52:14.385277 | debian-bookworm | + 2026-07-20 02:52:14.385388 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-07-20 02:52:14.385495 | debian-bookworm | + 2026-07-20 02:52:14.385606 | debian-bookworm | +## Kernel parameters 2026-07-20 02:52:14.385718 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-07-20 02:52:14.385828 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-07-20 02:52:14.385985 | debian-bookworm | + 2026-07-20 02:52:14.386103 | debian-bookworm | +## Kernel module loading and unloading 2026-07-20 02:52:14.386219 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-07-20 02:52:14.386332 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-07-20 02:52:14.386445 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-07-20 02:52:14.386559 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-07-20 02:52:14.386667 | debian-bookworm | + 2026-07-20 02:52:14.386777 | debian-bookworm | +## Modprobe configuration 2026-07-20 02:52:14.386909 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-07-20 02:52:14.387021 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-07-20 02:52:14.387129 | debian-bookworm | + 2026-07-20 02:52:14.387241 | debian-bookworm | +## KExec usage (all actions) 2026-07-20 02:52:14.387352 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-07-20 02:52:14.387462 | debian-bookworm | + 2026-07-20 02:52:14.387603 | debian-bookworm | +## Special files 2026-07-20 02:52:14.387720 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-07-20 02:52:14.387830 | debian-bookworm | + 2026-07-20 02:52:14.387982 | debian-bookworm | +## Mount operations (only attributable) 2026-07-20 02:52:14.388099 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-07-20 02:52:14.388207 | debian-bookworm | + 2026-07-20 02:52:14.388316 | debian-bookworm | +### NFS mount 2026-07-20 02:52:14.388441 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.388564 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.388675 | debian-bookworm | + 2026-07-20 02:52:14.388789 | debian-bookworm | +## Change swap (only attributable) 2026-07-20 02:52:14.388918 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-07-20 02:52:14.389043 | debian-bookworm | + 2026-07-20 02:52:14.389155 | debian-bookworm | +## Time 2026-07-20 02:52:14.389269 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-07-20 02:52:14.389380 | debian-bookworm | +### Local time zone 2026-07-20 02:52:14.389493 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-07-20 02:52:14.389599 | debian-bookworm | + 2026-07-20 02:52:14.389709 | debian-bookworm | +## Stunnel 2026-07-20 02:52:14.389821 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-07-20 02:52:14.389974 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-07-20 02:52:14.390086 | debian-bookworm | + 2026-07-20 02:52:14.390200 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-07-20 02:52:14.390312 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-07-20 02:52:14.390422 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-07-20 02:52:14.390533 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-07-20 02:52:14.390645 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-07-20 02:52:14.390755 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-07-20 02:52:14.390866 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-07-20 02:52:14.390992 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-07-20 02:52:14.391103 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-07-20 02:52:14.391216 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-07-20 02:52:14.391325 | debian-bookworm | + 2026-07-20 02:52:14.391438 | debian-bookworm | +## User, group, password databases 2026-07-20 02:52:14.391602 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-07-20 02:52:14.391716 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-07-20 02:52:14.391829 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-07-20 02:52:14.391953 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-07-20 02:52:14.392080 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-07-20 02:52:14.392191 | debian-bookworm | + 2026-07-20 02:52:14.392305 | debian-bookworm | +## Sudoers file changes 2026-07-20 02:52:14.392417 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-07-20 02:52:14.392532 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-07-20 02:52:14.392641 | debian-bookworm | + 2026-07-20 02:52:14.392751 | debian-bookworm | +## Passwd 2026-07-20 02:52:14.392864 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-07-20 02:52:14.393064 | debian-bookworm | + 2026-07-20 02:52:14.393179 | debian-bookworm | +## Tools to change group identifiers 2026-07-20 02:52:14.393291 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-07-20 02:52:14.393405 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-07-20 02:52:14.393519 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-07-20 02:52:14.393632 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-07-20 02:52:14.393743 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-07-20 02:52:14.393854 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-07-20 02:52:14.393981 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-07-20 02:52:14.394090 | debian-bookworm | + 2026-07-20 02:52:14.394207 | debian-bookworm | +## Login configuration and information 2026-07-20 02:52:14.394318 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-07-20 02:52:14.394430 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-07-20 02:52:14.394542 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-07-20 02:52:14.394654 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-07-20 02:52:14.394766 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-07-20 02:52:14.394956 | debian-bookworm | + 2026-07-20 02:52:14.395082 | debian-bookworm | +## Network Environment 2026-07-20 02:52:14.395193 | debian-bookworm | +### Changes to hostname 2026-07-20 02:52:14.395309 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-07-20 02:52:14.395420 | debian-bookworm | + 2026-07-20 02:52:14.395553 | debian-bookworm | +### Detect Remote Shell Use 2026-07-20 02:52:14.395671 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-07-20 02:52:14.395784 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-07-20 02:52:14.395904 | debian-bookworm | + 2026-07-20 02:52:14.396019 | debian-bookworm | +### Successful IPv4 Connections 2026-07-20 02:52:14.396134 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-07-20 02:52:14.396244 | debian-bookworm | + 2026-07-20 02:52:14.396356 | debian-bookworm | +### Successful IPv6 Connections 2026-07-20 02:52:14.396469 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-07-20 02:52:14.396577 | debian-bookworm | + 2026-07-20 02:52:14.396700 | debian-bookworm | +### Changes to other files 2026-07-20 02:52:14.396812 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-07-20 02:52:14.396940 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-07-20 02:52:14.397057 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-07-20 02:52:14.397168 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-07-20 02:52:14.397283 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-07-20 02:52:14.397391 | debian-bookworm | + 2026-07-20 02:52:14.397503 | debian-bookworm | +### Changes to issue 2026-07-20 02:52:14.397616 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-07-20 02:52:14.397732 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-07-20 02:52:14.397842 | debian-bookworm | + 2026-07-20 02:52:14.397995 | debian-bookworm | +## System startup scripts 2026-07-20 02:52:14.398111 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-07-20 02:52:14.398225 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-07-20 02:52:14.398338 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-07-20 02:52:14.398450 | debian-bookworm | + 2026-07-20 02:52:14.398560 | debian-bookworm | +## Library search paths 2026-07-20 02:52:14.398672 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-07-20 02:52:14.398784 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-07-20 02:52:14.398906 | debian-bookworm | + 2026-07-20 02:52:14.399039 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-07-20 02:52:14.399154 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-07-20 02:52:14.399263 | debian-bookworm | + 2026-07-20 02:52:14.399373 | debian-bookworm | +## Pam configuration 2026-07-20 02:52:14.399516 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-07-20 02:52:14.399646 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-07-20 02:52:14.399762 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-07-20 02:52:14.399889 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-07-20 02:52:14.400003 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-07-20 02:52:14.400114 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-07-20 02:52:14.400224 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-07-20 02:52:14.400333 | debian-bookworm | + 2026-07-20 02:52:14.400445 | debian-bookworm | +## Mail configuration 2026-07-20 02:52:14.400556 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-07-20 02:52:14.400669 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-07-20 02:52:14.400781 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-07-20 02:52:14.400923 | debian-bookworm | + 2026-07-20 02:52:14.401043 | debian-bookworm | +## SSH configuration 2026-07-20 02:52:14.401155 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-07-20 02:52:14.401268 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-07-20 02:52:14.401377 | debian-bookworm | + 2026-07-20 02:52:14.401490 | debian-bookworm | +## root ssh key tampering 2026-07-20 02:52:14.401602 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-07-20 02:52:14.401708 | debian-bookworm | + 2026-07-20 02:52:14.401815 | debian-bookworm | +# Systemd 2026-07-20 02:52:14.401940 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-07-20 02:52:14.402053 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-07-20 02:52:14.402162 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-07-20 02:52:14.402271 | debian-bookworm | + 2026-07-20 02:52:14.402384 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-07-20 02:52:14.402496 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:14.402608 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:14.402721 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-07-20 02:52:14.402829 | debian-bookworm | + 2026-07-20 02:52:14.402979 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-07-20 02:52:14.403094 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-07-20 02:52:14.403207 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:14.403315 | debian-bookworm | + 2026-07-20 02:52:14.403428 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-07-20 02:52:14.403563 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-07-20 02:52:14.403674 | debian-bookworm | + 2026-07-20 02:52:14.403788 | debian-bookworm | +## Critical elements access failures 2026-07-20 02:52:14.403927 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404043 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404154 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404277 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404389 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404501 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404613 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404727 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-07-20 02:52:14.404837 | debian-bookworm | + 2026-07-20 02:52:14.404986 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-07-20 02:52:14.405101 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-07-20 02:52:14.405214 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-07-20 02:52:14.405322 | debian-bookworm | + 2026-07-20 02:52:14.405431 | debian-bookworm | +## Power state 2026-07-20 02:52:14.405542 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-07-20 02:52:14.405653 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-07-20 02:52:14.405764 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-07-20 02:52:14.405917 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-07-20 02:52:14.406032 | debian-bookworm | + 2026-07-20 02:52:14.406143 | debian-bookworm | +## Session initiation information 2026-07-20 02:52:14.406253 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-07-20 02:52:14.406372 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-07-20 02:52:14.406484 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-07-20 02:52:14.406593 | debian-bookworm | + 2026-07-20 02:52:14.406707 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-07-20 02:52:14.406820 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.406947 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407062 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407176 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407294 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407408 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407558 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407676 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407790 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.407935 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.408051 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.408164 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.408275 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:14.408423 | debian-bookworm | + 2026-07-20 02:52:14.408573 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-07-20 02:52:14.408687 | debian-bookworm | + 2026-07-20 02:52:14.408798 | debian-bookworm | +## Reconnaissance 2026-07-20 02:52:14.408928 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-07-20 02:52:14.409039 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-07-20 02:52:14.409150 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-07-20 02:52:14.409262 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-07-20 02:52:14.409372 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-07-20 02:52:14.409482 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-07-20 02:52:14.409589 | debian-bookworm | + 2026-07-20 02:52:14.409699 | debian-bookworm | +## Suspicious activity 2026-07-20 02:52:14.409931 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-07-20 02:52:14.410058 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-07-20 02:52:14.410172 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-07-20 02:52:14.410285 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-07-20 02:52:14.410396 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-07-20 02:52:14.410508 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-07-20 02:52:14.410631 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-07-20 02:52:14.410741 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-07-20 02:52:14.410854 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-07-20 02:52:14.410982 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-07-20 02:52:14.411095 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-07-20 02:52:14.411205 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-07-20 02:52:14.411317 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-07-20 02:52:14.411427 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-07-20 02:52:14.411579 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-07-20 02:52:14.411694 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-07-20 02:52:14.411807 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-07-20 02:52:14.411960 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-07-20 02:52:14.412075 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-07-20 02:52:14.412195 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-07-20 02:52:14.412308 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-07-20 02:52:14.412419 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-07-20 02:52:14.412526 | debian-bookworm | + 2026-07-20 02:52:14.412634 | debian-bookworm | +## sssd 2026-07-20 02:52:14.412752 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.412884 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.413002 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.413116 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.413229 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.413338 | debian-bookworm | + 2026-07-20 02:52:14.413452 | debian-bookworm | +## T1002 Data Compressed 2026-07-20 02:52:14.413558 | debian-bookworm | + 2026-07-20 02:52:14.413667 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-07-20 02:52:14.413778 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-07-20 02:52:14.413923 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-07-20 02:52:14.414040 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-07-20 02:52:14.414147 | debian-bookworm | + 2026-07-20 02:52:14.414262 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-07-20 02:52:14.414374 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-07-20 02:52:14.414480 | debian-bookworm | + 2026-07-20 02:52:14.414591 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-07-20 02:52:14.414709 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-07-20 02:52:14.414817 | debian-bookworm | + 2026-07-20 02:52:14.414943 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-07-20 02:52:14.415057 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-07-20 02:52:14.415165 | debian-bookworm | + 2026-07-20 02:52:14.415276 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-07-20 02:52:14.415388 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-07-20 02:52:14.415522 | debian-bookworm | + 2026-07-20 02:52:14.415639 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-07-20 02:52:14.415753 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-07-20 02:52:14.415861 | debian-bookworm | + 2026-07-20 02:52:14.415988 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-07-20 02:52:14.416101 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-07-20 02:52:14.416208 | debian-bookworm | + 2026-07-20 02:52:14.416319 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-07-20 02:52:14.416430 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-07-20 02:52:14.416538 | debian-bookworm | + 2026-07-20 02:52:14.416657 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-07-20 02:52:14.416766 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-07-20 02:52:14.416906 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-07-20 02:52:14.417030 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-07-20 02:52:14.417139 | debian-bookworm | + 2026-07-20 02:52:14.417251 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-07-20 02:52:14.417368 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-07-20 02:52:14.417489 | debian-bookworm | + 2026-07-20 02:52:14.417602 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-07-20 02:52:14.417714 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-07-20 02:52:14.417825 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-07-20 02:52:14.417950 | debian-bookworm | + 2026-07-20 02:52:14.418062 | debian-bookworm | +## Sbin suspicious activity 2026-07-20 02:52:14.418174 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-07-20 02:52:14.418284 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-07-20 02:52:14.418397 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-07-20 02:52:14.418508 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-07-20 02:52:14.418619 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-07-20 02:52:14.418754 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-07-20 02:52:14.419061 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-07-20 02:52:14.419188 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-07-20 02:52:14.419305 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-07-20 02:52:14.419418 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-07-20 02:52:14.419549 | debian-bookworm | + 2026-07-20 02:52:14.419665 | debian-bookworm | +### kde4 2026-07-20 02:52:14.419782 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.419917 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:14.420030 | debian-bookworm | + 2026-07-20 02:52:14.420144 | debian-bookworm | +## dbus-send invocation 2026-07-20 02:52:14.420260 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-07-20 02:52:14.420371 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-07-20 02:52:14.420487 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-07-20 02:52:14.420595 | debian-bookworm | + 2026-07-20 02:52:14.420705 | debian-bookworm | +## pkexec invocation 2026-07-20 02:52:14.420818 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-07-20 02:52:14.420969 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-07-20 02:52:14.421081 | debian-bookworm | + 2026-07-20 02:52:14.421193 | debian-bookworm | +## Suspicious shells 2026-07-20 02:52:14.421305 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-07-20 02:52:14.421418 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-07-20 02:52:14.421528 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-07-20 02:52:14.421639 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-07-20 02:52:14.421749 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-07-20 02:52:14.421858 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-07-20 02:52:14.422020 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-07-20 02:52:14.422147 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-07-20 02:52:14.422260 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-07-20 02:52:14.422368 | debian-bookworm | + 2026-07-20 02:52:14.422479 | debian-bookworm | +# Web Server Actvity 2026-07-20 02:52:14.422596 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-07-20 02:52:14.422710 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-07-20 02:52:14.422818 | debian-bookworm | + 2026-07-20 02:52:14.422968 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-07-20 02:52:14.423084 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-07-20 02:52:14.423194 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-07-20 02:52:14.423305 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-07-20 02:52:14.423413 | debian-bookworm | + 2026-07-20 02:52:14.423554 | debian-bookworm | +### https://github.com/tmux/tmux 2026-07-20 02:52:14.423667 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-07-20 02:52:14.423781 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-07-20 02:52:14.423906 | debian-bookworm | + 2026-07-20 02:52:14.424020 | debian-bookworm | +## Shell/profile configurations 2026-07-20 02:52:14.424132 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-07-20 02:52:14.424241 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-07-20 02:52:14.424352 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-07-20 02:52:14.424462 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-07-20 02:52:14.424573 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-07-20 02:52:14.424682 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-07-20 02:52:14.424792 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-07-20 02:52:14.424917 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-07-20 02:52:14.425039 | debian-bookworm | + 2026-07-20 02:52:14.425150 | debian-bookworm | +### https://github.com/xxh/xxh 2026-07-20 02:52:14.425262 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-07-20 02:52:14.425375 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-07-20 02:52:14.425486 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-07-20 02:52:14.425594 | debian-bookworm | + 2026-07-20 02:52:14.425705 | debian-bookworm | +## Injection 2026-07-20 02:52:14.425818 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-07-20 02:52:14.425991 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-07-20 02:52:14.426107 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-07-20 02:52:14.426220 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-07-20 02:52:14.426333 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-07-20 02:52:14.426450 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-07-20 02:52:14.426562 | debian-bookworm | + 2026-07-20 02:52:14.426674 | debian-bookworm | +## Anonymous File Creation 2026-07-20 02:52:14.426785 | debian-bookworm | +### These rules watch the use of memfd_create 2026-07-20 02:52:14.426976 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-07-20 02:52:14.427122 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-07-20 02:52:14.427242 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-07-20 02:52:14.427350 | debian-bookworm | + 2026-07-20 02:52:14.427459 | debian-bookworm | +## Privilege Abuse 2026-07-20 02:52:14.427687 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-07-20 02:52:14.427817 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-07-20 02:52:14.427948 | debian-bookworm | + 2026-07-20 02:52:14.428063 | debian-bookworm | +# Socket Creations 2026-07-20 02:52:14.428180 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-07-20 02:52:14.428292 | debian-bookworm | + 2026-07-20 02:52:14.428407 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-07-20 02:52:14.428520 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-07-20 02:52:14.428627 | debian-bookworm | + 2026-07-20 02:52:14.428739 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-07-20 02:52:14.428851 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-07-20 02:52:14.429002 | debian-bookworm | + 2026-07-20 02:52:14.429118 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-07-20 02:52:14.429227 | debian-bookworm | + 2026-07-20 02:52:14.429338 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-07-20 02:52:14.429450 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-07-20 02:52:14.429561 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-07-20 02:52:14.429667 | debian-bookworm | + 2026-07-20 02:52:14.429779 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-07-20 02:52:14.429909 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-07-20 02:52:14.430070 | debian-bookworm | + 2026-07-20 02:52:14.430192 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-07-20 02:52:14.430306 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-07-20 02:52:14.430418 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-07-20 02:52:14.430529 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-07-20 02:52:14.430641 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-07-20 02:52:14.430747 | debian-bookworm | + 2026-07-20 02:52:14.430858 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-07-20 02:52:14.431031 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-07-20 02:52:14.431158 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-07-20 02:52:14.431282 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-07-20 02:52:14.431396 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-07-20 02:52:14.431538 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-07-20 02:52:14.431684 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-07-20 02:52:14.431803 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-07-20 02:52:14.431931 | debian-bookworm | + 2026-07-20 02:52:14.432051 | debian-bookworm | +# PIP(3) (Python installs) 2026-07-20 02:52:14.432167 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432281 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432404 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432518 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432629 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432742 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-07-20 02:52:14.432853 | debian-bookworm | + 2026-07-20 02:52:14.432985 | debian-bookworm | +# npm 2026-07-20 02:52:14.433098 | debian-bookworm | +## T1072 third party software 2026-07-20 02:52:14.433209 | debian-bookworm | +## https://www.npmjs.com 2026-07-20 02:52:14.433323 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-07-20 02:52:14.433437 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-07-20 02:52:14.433545 | debian-bookworm | + 2026-07-20 02:52:14.433660 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-07-20 02:52:14.433770 | debian-bookworm | +## T1072 third party software 2026-07-20 02:52:14.433920 | debian-bookworm | +## https://www.cpan.org 2026-07-20 02:52:14.434043 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-07-20 02:52:14.434153 | debian-bookworm | + 2026-07-20 02:52:14.434263 | debian-bookworm | +# Ruby (RubyGems installs) 2026-07-20 02:52:14.434372 | debian-bookworm | +## T1072 third party software 2026-07-20 02:52:14.434481 | debian-bookworm | +## https://rubygems.org 2026-07-20 02:52:14.434594 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-07-20 02:52:14.434701 | debian-bookworm | + 2026-07-20 02:52:14.434813 | debian-bookworm | +# LuaRocks (Lua installs) 2026-07-20 02:52:14.434960 | debian-bookworm | +## T1072 third party software 2026-07-20 02:52:14.435078 | debian-bookworm | +## https://luarocks.org 2026-07-20 02:52:14.435192 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-07-20 02:52:14.435301 | debian-bookworm | + 2026-07-20 02:52:14.435413 | debian-bookworm | +# Pacman (Arch Linux) 2026-07-20 02:52:14.435550 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-07-20 02:52:14.435664 | debian-bookworm | +## T1072 third party software 2026-07-20 02:52:14.435777 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-07-20 02:52:14.435906 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-07-20 02:52:14.436018 | debian-bookworm | + 2026-07-20 02:52:14.436133 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-07-20 02:52:14.436243 | debian-bookworm | + 2026-07-20 02:52:14.436352 | debian-bookworm | +## GDS specific secrets 2026-07-20 02:52:14.436463 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-07-20 02:52:14.436572 | debian-bookworm | + 2026-07-20 02:52:14.436683 | debian-bookworm | +## IBM Bigfix BESClient 2026-07-20 02:52:14.436798 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-07-20 02:52:14.436925 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-07-20 02:52:14.437034 | debian-bookworm | + 2026-07-20 02:52:14.437144 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-07-20 02:52:14.437254 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-07-20 02:52:14.437362 | debian-bookworm | + 2026-07-20 02:52:14.437472 | debian-bookworm | +## Salt 2026-07-20 02:52:14.437582 | debian-bookworm | +## https://saltproject.io/ 2026-07-20 02:52:14.437697 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-07-20 02:52:14.437816 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-07-20 02:52:14.437978 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-07-20 02:52:14.438094 | debian-bookworm | + 2026-07-20 02:52:14.438207 | debian-bookworm | +## Otter 2026-07-20 02:52:14.438320 | debian-bookworm | +## https://inedo.com/otter 2026-07-20 02:52:14.438431 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-07-20 02:52:14.438539 | debian-bookworm | + 2026-07-20 02:52:14.438652 | debian-bookworm | +## T1081 Credentials In Files 2026-07-20 02:52:14.438765 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-07-20 02:52:14.438894 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-07-20 02:52:14.439008 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-07-20 02:52:14.439120 | debian-bookworm | +### macOS 2026-07-20 02:52:14.439230 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-07-20 02:52:14.439341 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-07-20 02:52:14.439451 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-07-20 02:52:14.439582 | debian-bookworm | + 2026-07-20 02:52:14.439696 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-07-20 02:52:14.439808 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-07-20 02:52:14.439959 | debian-bookworm | +### macOS 2026-07-20 02:52:14.440075 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-07-20 02:52:14.440196 | debian-bookworm | + 2026-07-20 02:52:14.440316 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-07-20 02:52:14.440426 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-07-20 02:52:14.440537 | debian-bookworm | +### macOS 2026-07-20 02:52:14.440648 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-07-20 02:52:14.440757 | debian-bookworm | + 2026-07-20 02:52:14.440885 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-07-20 02:52:14.440999 | debian-bookworm | + 2026-07-20 02:52:14.441114 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-07-20 02:52:14.441229 | debian-bookworm | +### macOS 2026-07-20 02:52:14.441341 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-07-20 02:52:14.441451 | debian-bookworm | + 2026-07-20 02:52:14.441562 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-07-20 02:52:14.441676 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-07-20 02:52:14.441787 | debian-bookworm | +### macOS 2026-07-20 02:52:14.441992 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-07-20 02:52:14.442129 | debian-bookworm | + 2026-07-20 02:52:14.442242 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-07-20 02:52:14.442361 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-07-20 02:52:14.442490 | debian-bookworm | +### macOS 2026-07-20 02:52:14.442621 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-07-20 02:52:14.442732 | debian-bookworm | + 2026-07-20 02:52:14.442847 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-07-20 02:52:14.443004 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-07-20 02:52:14.443119 | debian-bookworm | +### macOS 2026-07-20 02:52:14.443231 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-07-20 02:52:14.443339 | debian-bookworm | + 2026-07-20 02:52:14.443450 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-07-20 02:52:14.443584 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-07-20 02:52:14.443696 | debian-bookworm | +### macOS 2026-07-20 02:52:14.443807 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-07-20 02:52:14.443932 | debian-bookworm | + 2026-07-20 02:52:14.444047 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-07-20 02:52:14.444158 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-07-20 02:52:14.444268 | debian-bookworm | +### macOS 2026-07-20 02:52:14.444394 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-07-20 02:52:14.444531 | debian-bookworm | + 2026-07-20 02:52:14.444647 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-07-20 02:52:14.444783 | debian-bookworm | +### https://beyondgrep.com 2026-07-20 02:52:14.444932 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-07-20 02:52:14.445047 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-07-20 02:52:14.445159 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-07-20 02:52:14.445268 | debian-bookworm | +### macOS 2026-07-20 02:52:14.445388 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-07-20 02:52:14.445497 | debian-bookworm | + 2026-07-20 02:52:14.445608 | debian-bookworm | +## Docker 2026-07-20 02:52:14.445718 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-07-20 02:52:14.445832 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-07-20 02:52:14.445985 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-07-20 02:52:14.446101 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-07-20 02:52:14.446211 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-07-20 02:52:14.446323 | debian-bookworm | +-w /etc/docker -k docker 2026-07-20 02:52:14.446433 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-07-20 02:52:14.446543 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-07-20 02:52:14.446653 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-07-20 02:52:14.446762 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-07-20 02:52:14.446885 | debian-bookworm | + 2026-07-20 02:52:14.447019 | debian-bookworm | +## Virtualization stuff 2026-07-20 02:52:14.447135 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-07-20 02:52:14.447246 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-07-20 02:52:14.447357 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-07-20 02:52:14.447467 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-07-20 02:52:14.447601 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-07-20 02:52:14.447722 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-07-20 02:52:14.447834 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-07-20 02:52:14.447966 | debian-bookworm | + 2026-07-20 02:52:14.448081 | debian-bookworm | +#### VirtualBox on macOS 2026-07-20 02:52:14.448198 | debian-bookworm | + 2026-07-20 02:52:14.448354 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-07-20 02:52:14.448520 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-07-20 02:52:14.448638 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-07-20 02:52:14.448750 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-07-20 02:52:14.448862 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-07-20 02:52:14.449032 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-07-20 02:52:14.449145 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-07-20 02:52:14.449259 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-07-20 02:52:14.449371 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-07-20 02:52:14.449483 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-07-20 02:52:14.449658 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-07-20 02:52:14.449777 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-07-20 02:52:14.449914 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-07-20 02:52:14.450033 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-07-20 02:52:14.450146 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-07-20 02:52:14.450259 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-07-20 02:52:14.450370 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-07-20 02:52:14.450478 | debian-bookworm | + 2026-07-20 02:52:14.450589 | debian-bookworm | +### Parallels Desktop on macOS 2026-07-20 02:52:14.450698 | debian-bookworm | + 2026-07-20 02:52:14.450809 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-07-20 02:52:14.450987 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-07-20 02:52:14.451107 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-07-20 02:52:14.451219 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-07-20 02:52:14.451331 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-07-20 02:52:14.451443 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-07-20 02:52:14.451576 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-07-20 02:52:14.451692 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-07-20 02:52:14.451802 | debian-bookworm | + 2026-07-20 02:52:14.451933 | debian-bookworm | +### qemu on macOS 2026-07-20 02:52:14.452045 | debian-bookworm | + 2026-07-20 02:52:14.452157 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-07-20 02:52:14.452270 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-07-20 02:52:14.452384 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-07-20 02:52:14.452495 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-07-20 02:52:14.452610 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-07-20 02:52:14.452718 | debian-bookworm | + 2026-07-20 02:52:14.452829 | debian-bookworm | +## Kubelet 2026-07-20 02:52:14.452982 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-07-20 02:52:14.453095 | debian-bookworm | + 2026-07-20 02:52:14.453207 | debian-bookworm | +# ipc system call 2026-07-20 02:52:14.453317 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-07-20 02:52:14.453426 | debian-bookworm | + 2026-07-20 02:52:14.453545 | debian-bookworm | +## msgctl 2026-07-20 02:52:14.453661 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-07-20 02:52:14.453771 | debian-bookworm | +## msgget 2026-07-20 02:52:14.453935 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-07-20 02:52:14.454053 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:14.454168 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-07-20 02:52:14.454280 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-07-20 02:52:14.454388 | debian-bookworm | + 2026-07-20 02:52:14.454498 | debian-bookworm | +## semctl 2026-07-20 02:52:14.454608 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-07-20 02:52:14.454716 | debian-bookworm | +## semget 2026-07-20 02:52:14.454834 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-07-20 02:52:14.454993 | debian-bookworm | +## semop 2026-07-20 02:52:14.455110 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-07-20 02:52:14.455235 | debian-bookworm | +## semtimedop 2026-07-20 02:52:14.455347 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-07-20 02:52:14.455460 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:14.455606 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-07-20 02:52:14.455722 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-07-20 02:52:14.455836 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-07-20 02:52:14.455967 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-07-20 02:52:14.456079 | debian-bookworm | + 2026-07-20 02:52:14.456189 | debian-bookworm | +## shmctl 2026-07-20 02:52:14.456304 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-07-20 02:52:14.456442 | debian-bookworm | +## shmget 2026-07-20 02:52:14.456594 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-07-20 02:52:14.456712 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:14.456828 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-07-20 02:52:14.456982 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-07-20 02:52:14.457095 | debian-bookworm | + 2026-07-20 02:52:14.457210 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-07-20 02:52:14.457318 | debian-bookworm | + 2026-07-20 02:52:14.457430 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-07-20 02:52:14.457537 | debian-bookworm | + 2026-07-20 02:52:14.457649 | debian-bookworm | +## Common Shells 2026-07-20 02:52:14.457760 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-07-20 02:52:14.457890 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-07-20 02:52:14.458015 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-07-20 02:52:14.458126 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-07-20 02:52:14.458237 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-07-20 02:52:14.458351 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-07-20 02:52:14.458462 | debian-bookworm | + 2026-07-20 02:52:14.458576 | debian-bookworm | +## Root command executions 2026-07-20 02:52:14.458689 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-07-20 02:52:14.458797 | debian-bookworm | + 2026-07-20 02:52:14.458935 | debian-bookworm | +## File Deletion Events by User 2026-07-20 02:52:14.459055 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-07-20 02:52:14.459163 | debian-bookworm | + 2026-07-20 02:52:14.459273 | debian-bookworm | +## File Access 2026-07-20 02:52:14.459391 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-07-20 02:52:14.459532 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-07-20 02:52:14.459652 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-07-20 02:52:14.459762 | debian-bookworm | + 2026-07-20 02:52:14.459908 | debian-bookworm | +### Unsuccessful Creation 2026-07-20 02:52:14.460035 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-07-20 02:52:14.460151 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-07-20 02:52:14.460259 | debian-bookworm | + 2026-07-20 02:52:14.460368 | debian-bookworm | +### Unsuccessful Modification 2026-07-20 02:52:14.460488 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-07-20 02:52:14.460606 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-07-20 02:52:14.460714 | debian-bookworm | + 2026-07-20 02:52:14.460826 | debian-bookworm | +## 32bit API Exploitation 2026-07-20 02:52:14.460958 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-07-20 02:52:14.461074 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-07-20 02:52:14.461185 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-07-20 02:52:14.461294 | debian-bookworm | +### bit API. 2026-07-20 02:52:14.461407 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-07-20 02:52:14.461514 | debian-bookworm | + 2026-07-20 02:52:14.461627 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-07-20 02:52:14.461745 | debian-bookworm | + 2026-07-20 02:52:14.461854 | debian-bookworm | +##-e 2 2026-07-20 02:52:14.461974 | debian-bookworm | 2026-07-20 02:52:14.462229 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1784515933.5712855-2646-141297138012729/.source.rules", "state": "file", "uid": 0} 2026-07-20 02:52:14.462343 | debian-bookworm | 2026-07-20 02:52:14.462457 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-07-20 02:52:14.601657 | ubuntu-noble | --- before 2026-07-20 02:52:14.601870 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-2031ni9mrv1m/tmpaej392zk/auditd.conf.j2 2026-07-20 02:52:14.602004 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-07-20 02:52:14.602147 | ubuntu-noble | +# 2026-07-20 02:52:14.602267 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-07-20 02:52:14.602411 | ubuntu-noble | +# 2026-07-20 02:52:14.602529 | ubuntu-noble | + 2026-07-20 02:52:14.602645 | ubuntu-noble | +local_events = yes 2026-07-20 02:52:14.602761 | ubuntu-noble | +write_logs = yes 2026-07-20 02:52:14.602877 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-07-20 02:52:14.602993 | ubuntu-noble | +log_group = adm 2026-07-20 02:52:14.603136 | ubuntu-noble | +log_format = RAW 2026-07-20 02:52:14.603253 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-07-20 02:52:14.603404 | ubuntu-noble | +freq = 50 2026-07-20 02:52:14.603525 | ubuntu-noble | +max_log_file = 8 2026-07-20 02:52:14.603637 | ubuntu-noble | +num_logs = 5 2026-07-20 02:52:14.603752 | ubuntu-noble | +priority_boost = 4 2026-07-20 02:52:14.603862 | ubuntu-noble | +disp_qos = lossy 2026-07-20 02:52:14.603977 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-07-20 02:52:14.604133 | ubuntu-noble | +name_format = NONE 2026-07-20 02:52:14.604250 | ubuntu-noble | +##name = mydomain 2026-07-20 02:52:14.604389 | ubuntu-noble | +max_log_file_action = ROTATE 2026-07-20 02:52:14.604507 | ubuntu-noble | +space_left = 12361 2026-07-20 02:52:14.604621 | ubuntu-noble | +space_left_action = email 2026-07-20 02:52:14.604733 | ubuntu-noble | +verify_email = yes 2026-07-20 02:52:14.604845 | ubuntu-noble | +action_mail_acct = root 2026-07-20 02:52:14.604957 | ubuntu-noble | +admin_space_left = 50 2026-07-20 02:52:14.605088 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-07-20 02:52:14.605204 | ubuntu-noble | +disk_full_action = SUSPEND 2026-07-20 02:52:14.605336 | ubuntu-noble | +disk_error_action = SUSPEND 2026-07-20 02:52:14.605454 | ubuntu-noble | +use_libwrap = yes 2026-07-20 02:52:14.605567 | ubuntu-noble | +##tcp_listen_port = 60 2026-07-20 02:52:14.605680 | ubuntu-noble | +tcp_listen_queue = 5 2026-07-20 02:52:14.606001 | ubuntu-noble | +tcp_max_per_addr = 1 2026-07-20 02:52:14.607168 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-07-20 02:52:14.607186 | ubuntu-noble | +tcp_client_max_idle = 0 2026-07-20 02:52:14.607190 | ubuntu-noble | +enable_krb5 = no 2026-07-20 02:52:14.607194 | ubuntu-noble | +krb5_principal = auditd 2026-07-20 02:52:14.607198 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-07-20 02:52:14.607202 | ubuntu-noble | +distribute_network = no 2026-07-20 02:52:14.607206 | ubuntu-noble | 2026-07-20 02:52:14.607220 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1784515933.2991161-2428-279876190089930/.source.conf", "state": "file", "uid": 0} 2026-07-20 02:52:14.607226 | ubuntu-noble | 2026-07-20 02:52:14.607229 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-07-20 02:52:15.179375 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ActiveEnterTimestampMonotonic": "157076735", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:08 UTC", "AssertTimestampMonotonic": "157001979", "Before": "sysinit.target systemd-update-utmp.service shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "48560000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ConditionTimestampMonotonic": "157001940", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2418", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ExecMainStartTimestampMonotonic": "157045412", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2417 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2417 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2421 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2421 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:08 UTC", "InactiveExitTimestampMonotonic": "157029595", "InvocationID": "f3037387b8144ad980ec1bf55c637a87", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2418", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "708608", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-07-20 02:52:08 UTC", "StateChangeTimestampMonotonic": "157076735", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:15.191722 | debian-bookworm | 2026-07-20 02:52:15.191794 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-07-20 02:52:15.036250 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-07-20 02:52:15.036316 | ubuntu-noble | 2026-07-20 02:52:15.036324 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-07-20 02:52:15.596885 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.009507", "end": "2026-07-20 02:52:15.553685", "msg": "", "rc": 0, "start": "2026-07-20 02:52:15.544178", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-07-20 02:52:15.597098 | debian-bookworm | 2026-07-20 02:52:15.597354 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-07-20 02:52:15.952353 | debian-bookworm | --- before 2026-07-20 02:52:15.952458 | debian-bookworm | +++ after 2026-07-20 02:52:15.952474 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-07-20 02:52:15.952501 | debian-bookworm | { 2026-07-20 02:52:15.952514 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-07-20 02:52:15.952531 | debian-bookworm | - "state": "file" 2026-07-20 02:52:15.952669 | debian-bookworm | + "state": "absent" 2026-07-20 02:52:15.952783 | debian-bookworm | } 2026-07-20 02:52:15.952913 | debian-bookworm | 2026-07-20 02:52:15.953025 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-07-20 02:52:15.953138 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-07-20 02:52:15.953245 | debian-bookworm | 2026-07-20 02:52:15.953387 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-07-20 02:52:15.896640 | ubuntu-noble | --- before 2026-07-20 02:52:15.897341 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-2031ni9mrv1m/tmphloualp9/20-neo23x0.rules.j2 2026-07-20 02:52:15.897371 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-07-20 02:52:15.897379 | ubuntu-noble | +# ___ ___ __ __ 2026-07-20 02:52:15.897424 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-07-20 02:52:15.897601 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-07-20 02:52:15.897770 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-07-20 02:52:15.897948 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-07-20 02:52:15.898263 | ubuntu-noble | +# 2026-07-20 02:52:15.899341 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-07-20 02:52:15.899370 | ubuntu-noble | +# /etc/audit/audit.rules 2026-07-20 02:52:15.899376 | ubuntu-noble | +# 2026-07-20 02:52:15.899382 | ubuntu-noble | +# Compiled by Florian Roth 2026-07-20 02:52:15.899388 | ubuntu-noble | +# 2026-07-20 02:52:15.899416 | ubuntu-noble | +# Created : 2017/12/05 2026-07-20 02:52:15.899597 | ubuntu-noble | +# Modified : 2023/01/25 2026-07-20 02:52:15.899767 | ubuntu-noble | +# 2026-07-20 02:52:15.899947 | ubuntu-noble | +# Based on rules published here: 2026-07-20 02:52:15.900139 | ubuntu-noble | +# Gov.uk auditd rules 2026-07-20 02:52:15.900675 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-07-20 02:52:15.900988 | ubuntu-noble | +# CentOS 7 hardening 2026-07-20 02:52:15.901333 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-07-20 02:52:15.901582 | ubuntu-noble | +# Linux audit repo 2026-07-20 02:52:15.901862 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-07-20 02:52:15.902133 | ubuntu-noble | +# Auditd high performance linux auditing 2026-07-20 02:52:15.902428 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-07-20 02:52:15.902602 | ubuntu-noble | +# 2026-07-20 02:52:15.902780 | ubuntu-noble | +# Further rules 2026-07-20 02:52:15.903083 | ubuntu-noble | +# For PCI DSS compliance see: 2026-07-20 02:52:15.903399 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-07-20 02:52:15.903737 | ubuntu-noble | +# For NISPOM compliance see: 2026-07-20 02:52:15.904030 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-07-20 02:52:15.904193 | ubuntu-noble | + 2026-07-20 02:52:15.904386 | ubuntu-noble | +# Remove any existing rules 2026-07-20 02:52:15.904545 | ubuntu-noble | +-D 2026-07-20 02:52:15.904701 | ubuntu-noble | + 2026-07-20 02:52:15.904867 | ubuntu-noble | +# Buffer Size 2026-07-20 02:52:15.905078 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-07-20 02:52:15.905241 | ubuntu-noble | +-b 8192 2026-07-20 02:52:15.905422 | ubuntu-noble | + 2026-07-20 02:52:15.905577 | ubuntu-noble | +# Failure Mode 2026-07-20 02:52:15.905734 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-07-20 02:52:15.905869 | ubuntu-noble | +-f 1 2026-07-20 02:52:15.906016 | ubuntu-noble | + 2026-07-20 02:52:15.906159 | ubuntu-noble | +# Ignore errors 2026-07-20 02:52:15.906333 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-07-20 02:52:15.906462 | ubuntu-noble | +-i 2026-07-20 02:52:15.906597 | ubuntu-noble | + 2026-07-20 02:52:15.906738 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-07-20 02:52:15.906873 | ubuntu-noble | + 2026-07-20 02:52:15.907052 | ubuntu-noble | +## Audit the audit logs 2026-07-20 02:52:15.907174 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-07-20 02:52:15.908340 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-07-20 02:52:15.908367 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-07-20 02:52:15.908372 | ubuntu-noble | + 2026-07-20 02:52:15.908377 | ubuntu-noble | +## Auditd configuration 2026-07-20 02:52:15.908382 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-07-20 02:52:15.908387 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-07-20 02:52:15.908391 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-07-20 02:52:15.908395 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-07-20 02:52:15.908435 | ubuntu-noble | + 2026-07-20 02:52:15.908577 | ubuntu-noble | +## Monitor for use of audit management tools 2026-07-20 02:52:15.908721 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-07-20 02:52:15.908863 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-07-20 02:52:15.909037 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-07-20 02:52:15.909178 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-07-20 02:52:15.909314 | ubuntu-noble | + 2026-07-20 02:52:15.909608 | ubuntu-noble | +## Access to all audit trails 2026-07-20 02:52:15.910080 | ubuntu-noble | + 2026-07-20 02:52:15.910544 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-07-20 02:52:15.910707 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-07-20 02:52:15.910839 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-07-20 02:52:15.910971 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-07-20 02:52:15.911161 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-07-20 02:52:15.911280 | ubuntu-noble | + 2026-07-20 02:52:15.911426 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-07-20 02:52:15.911546 | ubuntu-noble | + 2026-07-20 02:52:15.911668 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-07-20 02:52:15.911781 | ubuntu-noble | + 2026-07-20 02:52:15.911903 | ubuntu-noble | +## Ignore SELinux AVC records 2026-07-20 02:52:15.912040 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-07-20 02:52:15.912150 | ubuntu-noble | + 2026-07-20 02:52:15.912271 | ubuntu-noble | +## Ignore current working directory records 2026-07-20 02:52:15.912410 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-07-20 02:52:15.912521 | ubuntu-noble | + 2026-07-20 02:52:15.912647 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-07-20 02:52:15.912770 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-07-20 02:52:15.912891 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-07-20 02:52:15.913051 | ubuntu-noble | + 2026-07-20 02:52:15.913136 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-07-20 02:52:15.913261 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-07-20 02:52:15.913388 | ubuntu-noble | + 2026-07-20 02:52:15.913510 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-07-20 02:52:15.913654 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-07-20 02:52:15.913773 | ubuntu-noble | + 2026-07-20 02:52:15.913893 | ubuntu-noble | +## Open VM Tools 2026-07-20 02:52:15.914051 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-07-20 02:52:15.914184 | ubuntu-noble | + 2026-07-20 02:52:15.914314 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-07-20 02:52:15.914438 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-07-20 02:52:15.914561 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-07-20 02:52:15.914663 | ubuntu-noble | + 2026-07-20 02:52:15.914785 | ubuntu-noble | +## FileBeat 2026-07-20 02:52:15.914921 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-07-20 02:52:15.915053 | ubuntu-noble | + 2026-07-20 02:52:15.915165 | ubuntu-noble | +## More information on how to filter events 2026-07-20 02:52:15.915278 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-07-20 02:52:15.915396 | ubuntu-noble | + 2026-07-20 02:52:15.915505 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-07-20 02:52:15.915605 | ubuntu-noble | + 2026-07-20 02:52:15.915713 | ubuntu-noble | +## Kernel parameters 2026-07-20 02:52:15.915822 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-07-20 02:52:15.915928 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-07-20 02:52:15.916045 | ubuntu-noble | + 2026-07-20 02:52:15.916151 | ubuntu-noble | +## Kernel module loading and unloading 2026-07-20 02:52:15.916266 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-07-20 02:52:15.917345 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-07-20 02:52:15.917366 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-07-20 02:52:15.917370 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-07-20 02:52:15.917374 | ubuntu-noble | + 2026-07-20 02:52:15.917378 | ubuntu-noble | +## Modprobe configuration 2026-07-20 02:52:15.917382 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-07-20 02:52:15.917385 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-07-20 02:52:15.917389 | ubuntu-noble | + 2026-07-20 02:52:15.917392 | ubuntu-noble | +## KExec usage (all actions) 2026-07-20 02:52:15.917409 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-07-20 02:52:15.917467 | ubuntu-noble | + 2026-07-20 02:52:15.917569 | ubuntu-noble | +## Special files 2026-07-20 02:52:15.917670 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-07-20 02:52:15.917764 | ubuntu-noble | + 2026-07-20 02:52:15.917863 | ubuntu-noble | +## Mount operations (only attributable) 2026-07-20 02:52:15.917968 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-07-20 02:52:15.918074 | ubuntu-noble | + 2026-07-20 02:52:15.918173 | ubuntu-noble | +### NFS mount 2026-07-20 02:52:15.918283 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.918417 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.918498 | ubuntu-noble | + 2026-07-20 02:52:15.918600 | ubuntu-noble | +## Change swap (only attributable) 2026-07-20 02:52:15.918703 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-07-20 02:52:15.918798 | ubuntu-noble | + 2026-07-20 02:52:15.918894 | ubuntu-noble | +## Time 2026-07-20 02:52:15.919038 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-07-20 02:52:15.919110 | ubuntu-noble | +### Local time zone 2026-07-20 02:52:15.919208 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-07-20 02:52:15.919312 | ubuntu-noble | + 2026-07-20 02:52:15.919407 | ubuntu-noble | +## Stunnel 2026-07-20 02:52:15.919507 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-07-20 02:52:15.919612 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-07-20 02:52:15.919699 | ubuntu-noble | + 2026-07-20 02:52:15.919801 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-07-20 02:52:15.919899 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-07-20 02:52:15.920021 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-07-20 02:52:15.920123 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-07-20 02:52:15.920225 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-07-20 02:52:15.920337 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-07-20 02:52:15.920435 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-07-20 02:52:15.920549 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-07-20 02:52:15.920631 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-07-20 02:52:15.920731 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-07-20 02:52:15.920822 | ubuntu-noble | + 2026-07-20 02:52:15.920919 | ubuntu-noble | +## User, group, password databases 2026-07-20 02:52:15.921026 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-07-20 02:52:15.921123 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-07-20 02:52:15.921222 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-07-20 02:52:15.921331 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-07-20 02:52:15.921430 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-07-20 02:52:15.921523 | ubuntu-noble | + 2026-07-20 02:52:15.921645 | ubuntu-noble | +## Sudoers file changes 2026-07-20 02:52:15.921765 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-07-20 02:52:15.921865 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-07-20 02:52:15.921970 | ubuntu-noble | + 2026-07-20 02:52:15.922132 | ubuntu-noble | +## Passwd 2026-07-20 02:52:15.922238 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-07-20 02:52:15.922347 | ubuntu-noble | + 2026-07-20 02:52:15.922449 | ubuntu-noble | +## Tools to change group identifiers 2026-07-20 02:52:15.922551 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-07-20 02:52:15.922655 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-07-20 02:52:15.922766 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-07-20 02:52:15.922859 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-07-20 02:52:15.922959 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-07-20 02:52:15.923078 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-07-20 02:52:15.923180 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-07-20 02:52:15.923275 | ubuntu-noble | + 2026-07-20 02:52:15.923412 | ubuntu-noble | +## Login configuration and information 2026-07-20 02:52:15.923558 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-07-20 02:52:15.923712 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-07-20 02:52:15.923868 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-07-20 02:52:15.924062 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-07-20 02:52:15.924220 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-07-20 02:52:15.924378 | ubuntu-noble | + 2026-07-20 02:52:15.924484 | ubuntu-noble | +## Network Environment 2026-07-20 02:52:15.924586 | ubuntu-noble | +### Changes to hostname 2026-07-20 02:52:15.924689 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-07-20 02:52:15.924783 | ubuntu-noble | + 2026-07-20 02:52:15.924882 | ubuntu-noble | +### Detect Remote Shell Use 2026-07-20 02:52:15.924986 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-07-20 02:52:15.925120 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-07-20 02:52:15.925212 | ubuntu-noble | + 2026-07-20 02:52:15.926037 | ubuntu-noble | +### Successful IPv4 Connections 2026-07-20 02:52:15.926058 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-07-20 02:52:15.926062 | ubuntu-noble | + 2026-07-20 02:52:15.926066 | ubuntu-noble | +### Successful IPv6 Connections 2026-07-20 02:52:15.926070 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-07-20 02:52:15.926074 | ubuntu-noble | + 2026-07-20 02:52:15.926077 | ubuntu-noble | +### Changes to other files 2026-07-20 02:52:15.926084 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-07-20 02:52:15.926121 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-07-20 02:52:15.926214 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-07-20 02:52:15.926330 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-07-20 02:52:15.926436 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-07-20 02:52:15.926535 | ubuntu-noble | + 2026-07-20 02:52:15.926635 | ubuntu-noble | +### Changes to issue 2026-07-20 02:52:15.926733 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-07-20 02:52:15.926833 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-07-20 02:52:15.926926 | ubuntu-noble | + 2026-07-20 02:52:15.927058 | ubuntu-noble | +## System startup scripts 2026-07-20 02:52:15.927159 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-07-20 02:52:15.927259 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-07-20 02:52:15.927372 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-07-20 02:52:15.927466 | ubuntu-noble | + 2026-07-20 02:52:15.927569 | ubuntu-noble | +## Library search paths 2026-07-20 02:52:15.927669 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-07-20 02:52:15.927770 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-07-20 02:52:15.927863 | ubuntu-noble | + 2026-07-20 02:52:15.927970 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-07-20 02:52:15.928083 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-07-20 02:52:15.928175 | ubuntu-noble | + 2026-07-20 02:52:15.928307 | ubuntu-noble | +## Pam configuration 2026-07-20 02:52:15.928387 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-07-20 02:52:15.928491 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-07-20 02:52:15.928590 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-07-20 02:52:15.928692 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-07-20 02:52:15.928792 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-07-20 02:52:15.928891 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-07-20 02:52:15.929015 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-07-20 02:52:15.929097 | ubuntu-noble | + 2026-07-20 02:52:15.929197 | ubuntu-noble | +## Mail configuration 2026-07-20 02:52:15.929314 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-07-20 02:52:15.929413 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-07-20 02:52:15.929513 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-07-20 02:52:15.929605 | ubuntu-noble | + 2026-07-20 02:52:15.929704 | ubuntu-noble | +## SSH configuration 2026-07-20 02:52:15.929805 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-07-20 02:52:15.929905 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-07-20 02:52:15.931317 | ubuntu-noble | + 2026-07-20 02:52:15.931338 | ubuntu-noble | +## root ssh key tampering 2026-07-20 02:52:15.931343 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-07-20 02:52:15.931346 | ubuntu-noble | + 2026-07-20 02:52:15.931350 | ubuntu-noble | +# Systemd 2026-07-20 02:52:15.931354 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-07-20 02:52:15.931357 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-07-20 02:52:15.931361 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-07-20 02:52:15.931364 | ubuntu-noble | + 2026-07-20 02:52:15.931368 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-07-20 02:52:15.931372 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:15.931375 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:15.931379 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-07-20 02:52:15.931393 | ubuntu-noble | + 2026-07-20 02:52:15.931400 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-07-20 02:52:15.931494 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-07-20 02:52:15.931596 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-07-20 02:52:15.931692 | ubuntu-noble | + 2026-07-20 02:52:15.931797 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-07-20 02:52:15.931899 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-07-20 02:52:15.932013 | ubuntu-noble | + 2026-07-20 02:52:15.932149 | ubuntu-noble | +## Critical elements access failures 2026-07-20 02:52:15.932260 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932379 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932517 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932588 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932693 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932796 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.932900 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.933019 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-07-20 02:52:15.933114 | ubuntu-noble | + 2026-07-20 02:52:15.933218 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-07-20 02:52:15.933332 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-07-20 02:52:15.933435 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-07-20 02:52:15.933529 | ubuntu-noble | + 2026-07-20 02:52:15.933633 | ubuntu-noble | +## Power state 2026-07-20 02:52:15.933730 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-07-20 02:52:15.933828 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-07-20 02:52:15.933927 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-07-20 02:52:15.934059 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-07-20 02:52:15.934153 | ubuntu-noble | + 2026-07-20 02:52:15.934253 | ubuntu-noble | +## Session initiation information 2026-07-20 02:52:15.934364 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-07-20 02:52:15.934474 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-07-20 02:52:15.934577 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-07-20 02:52:15.934696 | ubuntu-noble | + 2026-07-20 02:52:15.934760 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-07-20 02:52:15.935338 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935359 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935364 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935367 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935371 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935396 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935505 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935607 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935712 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.935816 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.936066 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.936183 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.936324 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-07-20 02:52:15.936399 | ubuntu-noble | + 2026-07-20 02:52:15.936499 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-07-20 02:52:15.936593 | ubuntu-noble | + 2026-07-20 02:52:15.936691 | ubuntu-noble | +## Reconnaissance 2026-07-20 02:52:15.936793 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-07-20 02:52:15.936891 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-07-20 02:52:15.937006 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-07-20 02:52:15.937164 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-07-20 02:52:15.937266 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-07-20 02:52:15.937384 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-07-20 02:52:15.937479 | ubuntu-noble | + 2026-07-20 02:52:15.937579 | ubuntu-noble | +## Suspicious activity 2026-07-20 02:52:15.937680 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-07-20 02:52:15.937779 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-07-20 02:52:15.937882 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-07-20 02:52:15.938107 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-07-20 02:52:15.938180 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-07-20 02:52:15.938332 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-07-20 02:52:15.938400 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-07-20 02:52:15.938506 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-07-20 02:52:15.939184 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-07-20 02:52:15.939202 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-07-20 02:52:15.939206 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-07-20 02:52:15.939210 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-07-20 02:52:15.939214 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-07-20 02:52:15.939217 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-07-20 02:52:15.939224 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-07-20 02:52:15.939318 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-07-20 02:52:15.939409 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-07-20 02:52:15.940135 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-07-20 02:52:15.940151 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-07-20 02:52:15.940158 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-07-20 02:52:15.940162 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-07-20 02:52:15.940165 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-07-20 02:52:15.940169 | ubuntu-noble | + 2026-07-20 02:52:15.940503 | ubuntu-noble | +## sssd 2026-07-20 02:52:15.940634 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.940737 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.940845 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.940954 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.941100 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.941192 | ubuntu-noble | + 2026-07-20 02:52:15.941312 | ubuntu-noble | +## T1002 Data Compressed 2026-07-20 02:52:15.941414 | ubuntu-noble | + 2026-07-20 02:52:15.941508 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-07-20 02:52:15.941609 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-07-20 02:52:15.941710 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-07-20 02:52:15.941809 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-07-20 02:52:15.941900 | ubuntu-noble | + 2026-07-20 02:52:15.942012 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-07-20 02:52:15.942114 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-07-20 02:52:15.942207 | ubuntu-noble | + 2026-07-20 02:52:15.942392 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-07-20 02:52:15.942431 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-07-20 02:52:15.943373 | ubuntu-noble | + 2026-07-20 02:52:15.943393 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-07-20 02:52:15.943398 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-07-20 02:52:15.943402 | ubuntu-noble | + 2026-07-20 02:52:15.943406 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-07-20 02:52:15.943410 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-07-20 02:52:15.943414 | ubuntu-noble | + 2026-07-20 02:52:15.943418 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-07-20 02:52:15.943431 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-07-20 02:52:15.943437 | ubuntu-noble | + 2026-07-20 02:52:15.943513 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-07-20 02:52:15.943617 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-07-20 02:52:15.943711 | ubuntu-noble | + 2026-07-20 02:52:15.943814 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-07-20 02:52:15.943935 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-07-20 02:52:15.944329 | ubuntu-noble | + 2026-07-20 02:52:15.944448 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-07-20 02:52:15.944531 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-07-20 02:52:15.944638 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-07-20 02:52:15.945943 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-07-20 02:52:15.945967 | ubuntu-noble | + 2026-07-20 02:52:15.945971 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-07-20 02:52:15.945975 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-07-20 02:52:15.945978 | ubuntu-noble | + 2026-07-20 02:52:15.945982 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-07-20 02:52:15.945985 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-07-20 02:52:15.946024 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-07-20 02:52:15.946028 | ubuntu-noble | + 2026-07-20 02:52:15.946032 | ubuntu-noble | +## Sbin suspicious activity 2026-07-20 02:52:15.946040 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-07-20 02:52:15.946043 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-07-20 02:52:15.946260 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-07-20 02:52:15.946333 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-07-20 02:52:15.946437 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-07-20 02:52:15.946542 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-07-20 02:52:15.946643 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-07-20 02:52:15.946743 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-07-20 02:52:15.946844 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-07-20 02:52:15.946942 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-07-20 02:52:15.947050 | ubuntu-noble | + 2026-07-20 02:52:15.947156 | ubuntu-noble | +### kde4 2026-07-20 02:52:15.947259 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.947382 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-07-20 02:52:15.947487 | ubuntu-noble | + 2026-07-20 02:52:15.947692 | ubuntu-noble | +## dbus-send invocation 2026-07-20 02:52:15.947699 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-07-20 02:52:15.947796 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-07-20 02:52:15.948328 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-07-20 02:52:15.948350 | ubuntu-noble | + 2026-07-20 02:52:15.948354 | ubuntu-noble | +## pkexec invocation 2026-07-20 02:52:15.948357 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-07-20 02:52:15.948361 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-07-20 02:52:15.948402 | ubuntu-noble | + 2026-07-20 02:52:15.948483 | ubuntu-noble | +## Suspicious shells 2026-07-20 02:52:15.948583 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-07-20 02:52:15.948683 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-07-20 02:52:15.948787 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-07-20 02:52:15.948885 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-07-20 02:52:15.948987 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-07-20 02:52:15.949121 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-07-20 02:52:15.949223 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-07-20 02:52:15.949358 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-07-20 02:52:15.949463 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-07-20 02:52:15.949555 | ubuntu-noble | + 2026-07-20 02:52:15.949652 | ubuntu-noble | +# Web Server Actvity 2026-07-20 02:52:15.949761 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-07-20 02:52:15.949868 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-07-20 02:52:15.949962 | ubuntu-noble | + 2026-07-20 02:52:15.950078 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-07-20 02:52:15.950174 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-07-20 02:52:15.950277 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-07-20 02:52:15.950416 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-07-20 02:52:15.950511 | ubuntu-noble | + 2026-07-20 02:52:15.950612 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-07-20 02:52:15.950710 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-07-20 02:52:15.950812 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-07-20 02:52:15.950907 | ubuntu-noble | + 2026-07-20 02:52:15.951358 | ubuntu-noble | +## Shell/profile configurations 2026-07-20 02:52:15.951374 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-07-20 02:52:15.951378 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-07-20 02:52:15.951381 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-07-20 02:52:15.951417 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-07-20 02:52:15.951518 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-07-20 02:52:15.951630 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-07-20 02:52:15.951733 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-07-20 02:52:15.951830 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-07-20 02:52:15.951921 | ubuntu-noble | + 2026-07-20 02:52:15.952051 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-07-20 02:52:15.952151 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-07-20 02:52:15.952250 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-07-20 02:52:15.952369 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-07-20 02:52:15.952463 | ubuntu-noble | + 2026-07-20 02:52:15.952563 | ubuntu-noble | +## Injection 2026-07-20 02:52:15.952662 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-07-20 02:52:15.952765 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-07-20 02:52:15.952868 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-07-20 02:52:15.952971 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-07-20 02:52:15.953089 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-07-20 02:52:15.953192 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-07-20 02:52:15.954328 | ubuntu-noble | + 2026-07-20 02:52:15.954351 | ubuntu-noble | +## Anonymous File Creation 2026-07-20 02:52:15.954355 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-07-20 02:52:15.954359 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-07-20 02:52:15.954363 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-07-20 02:52:15.954367 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-07-20 02:52:15.954370 | ubuntu-noble | + 2026-07-20 02:52:15.954374 | ubuntu-noble | +## Privilege Abuse 2026-07-20 02:52:15.954377 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-07-20 02:52:15.954381 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-07-20 02:52:15.954384 | ubuntu-noble | + 2026-07-20 02:52:15.954391 | ubuntu-noble | +# Socket Creations 2026-07-20 02:52:15.954494 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-07-20 02:52:15.954588 | ubuntu-noble | + 2026-07-20 02:52:15.954694 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-07-20 02:52:15.954799 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-07-20 02:52:15.954894 | ubuntu-noble | + 2026-07-20 02:52:15.955013 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-07-20 02:52:15.955110 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-07-20 02:52:15.955203 | ubuntu-noble | + 2026-07-20 02:52:15.955317 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-07-20 02:52:15.955412 | ubuntu-noble | + 2026-07-20 02:52:15.955511 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-07-20 02:52:15.955619 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-07-20 02:52:15.955714 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-07-20 02:52:15.955806 | ubuntu-noble | + 2026-07-20 02:52:15.955904 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-07-20 02:52:15.956030 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-07-20 02:52:15.956120 | ubuntu-noble | + 2026-07-20 02:52:15.956221 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-07-20 02:52:15.956334 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-07-20 02:52:15.956434 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-07-20 02:52:15.956538 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-07-20 02:52:15.956632 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-07-20 02:52:15.956722 | ubuntu-noble | + 2026-07-20 02:52:15.956822 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-07-20 02:52:15.956924 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-07-20 02:52:15.957032 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-07-20 02:52:15.957162 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-07-20 02:52:15.957268 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-07-20 02:52:15.957381 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-07-20 02:52:15.957483 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-07-20 02:52:15.957582 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-07-20 02:52:15.957675 | ubuntu-noble | + 2026-07-20 02:52:15.957774 | ubuntu-noble | +# PIP(3) (Python installs) 2026-07-20 02:52:15.957873 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-07-20 02:52:15.957976 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-07-20 02:52:15.958118 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-07-20 02:52:15.958219 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-07-20 02:52:15.958332 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-07-20 02:52:15.958435 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-07-20 02:52:15.958528 | ubuntu-noble | + 2026-07-20 02:52:15.958622 | ubuntu-noble | +# npm 2026-07-20 02:52:15.958754 | ubuntu-noble | +## T1072 third party software 2026-07-20 02:52:15.958824 | ubuntu-noble | +## https://www.npmjs.com 2026-07-20 02:52:15.958928 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-07-20 02:52:15.959043 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-07-20 02:52:15.959136 | ubuntu-noble | + 2026-07-20 02:52:15.959238 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-07-20 02:52:15.959351 | ubuntu-noble | +## T1072 third party software 2026-07-20 02:52:15.959449 | ubuntu-noble | +## https://www.cpan.org 2026-07-20 02:52:15.959550 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-07-20 02:52:15.959644 | ubuntu-noble | + 2026-07-20 02:52:15.959741 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-07-20 02:52:15.959841 | ubuntu-noble | +## T1072 third party software 2026-07-20 02:52:15.959938 | ubuntu-noble | +## https://rubygems.org 2026-07-20 02:52:15.960049 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-07-20 02:52:15.960143 | ubuntu-noble | + 2026-07-20 02:52:15.960241 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-07-20 02:52:15.960354 | ubuntu-noble | +## T1072 third party software 2026-07-20 02:52:15.960451 | ubuntu-noble | +## https://luarocks.org 2026-07-20 02:52:15.960552 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-07-20 02:52:15.960645 | ubuntu-noble | + 2026-07-20 02:52:15.960746 | ubuntu-noble | +# Pacman (Arch Linux) 2026-07-20 02:52:15.960851 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-07-20 02:52:15.960952 | ubuntu-noble | +## T1072 third party software 2026-07-20 02:52:15.961079 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-07-20 02:52:15.961182 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-07-20 02:52:15.961275 | ubuntu-noble | + 2026-07-20 02:52:15.961389 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-07-20 02:52:15.961483 | ubuntu-noble | + 2026-07-20 02:52:15.961580 | ubuntu-noble | +## GDS specific secrets 2026-07-20 02:52:15.961679 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-07-20 02:52:15.961771 | ubuntu-noble | + 2026-07-20 02:52:15.961869 | ubuntu-noble | +## IBM Bigfix BESClient 2026-07-20 02:52:15.962004 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-07-20 02:52:15.962099 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-07-20 02:52:15.962193 | ubuntu-noble | + 2026-07-20 02:52:15.962307 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-07-20 02:52:15.962407 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-07-20 02:52:15.962501 | ubuntu-noble | + 2026-07-20 02:52:15.962600 | ubuntu-noble | +## Salt 2026-07-20 02:52:15.962699 | ubuntu-noble | +## https://saltproject.io/ 2026-07-20 02:52:15.962804 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-07-20 02:52:15.962903 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-07-20 02:52:15.963017 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-07-20 02:52:15.963110 | ubuntu-noble | + 2026-07-20 02:52:15.963206 | ubuntu-noble | +## Otter 2026-07-20 02:52:15.963316 | ubuntu-noble | +## https://inedo.com/otter 2026-07-20 02:52:15.963416 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-07-20 02:52:15.963511 | ubuntu-noble | + 2026-07-20 02:52:15.963618 | ubuntu-noble | +## T1081 Credentials In Files 2026-07-20 02:52:15.963745 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-07-20 02:52:15.963848 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-07-20 02:52:15.963950 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-07-20 02:52:15.964075 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.965215 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-07-20 02:52:15.965234 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-07-20 02:52:15.965238 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-07-20 02:52:15.965242 | ubuntu-noble | + 2026-07-20 02:52:15.965245 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-07-20 02:52:15.965249 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-07-20 02:52:15.965253 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.965256 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-07-20 02:52:15.965259 | ubuntu-noble | + 2026-07-20 02:52:15.965263 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-07-20 02:52:15.965266 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-07-20 02:52:15.965273 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.965355 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-07-20 02:52:15.965449 | ubuntu-noble | + 2026-07-20 02:52:15.965553 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-07-20 02:52:15.965645 | ubuntu-noble | + 2026-07-20 02:52:15.965743 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-07-20 02:52:15.965840 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.965940 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-07-20 02:52:15.966048 | ubuntu-noble | + 2026-07-20 02:52:15.966146 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-07-20 02:52:15.966247 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-07-20 02:52:15.966356 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.966457 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-07-20 02:52:15.966552 | ubuntu-noble | + 2026-07-20 02:52:15.966650 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-07-20 02:52:15.966753 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-07-20 02:52:15.966850 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.966953 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-07-20 02:52:15.967069 | ubuntu-noble | + 2026-07-20 02:52:15.967175 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-07-20 02:52:15.967276 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-07-20 02:52:15.967387 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.967490 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-07-20 02:52:15.967585 | ubuntu-noble | + 2026-07-20 02:52:15.967684 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-07-20 02:52:15.967782 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-07-20 02:52:15.967878 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.967980 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-07-20 02:52:15.968087 | ubuntu-noble | + 2026-07-20 02:52:15.968189 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-07-20 02:52:15.968313 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-07-20 02:52:15.968397 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.968500 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-07-20 02:52:15.968593 | ubuntu-noble | + 2026-07-20 02:52:15.968695 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-07-20 02:52:15.969640 | ubuntu-noble | +### https://beyondgrep.com 2026-07-20 02:52:15.969658 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-07-20 02:52:15.969662 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-07-20 02:52:15.969665 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-07-20 02:52:15.969669 | ubuntu-noble | +### macOS 2026-07-20 02:52:15.969672 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-07-20 02:52:15.969676 | ubuntu-noble | + 2026-07-20 02:52:15.969679 | ubuntu-noble | +## Docker 2026-07-20 02:52:15.969683 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-07-20 02:52:15.969689 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-07-20 02:52:15.969777 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-07-20 02:52:15.969877 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-07-20 02:52:15.969974 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-07-20 02:52:15.970082 | ubuntu-noble | +-w /etc/docker -k docker 2026-07-20 02:52:15.970178 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-07-20 02:52:15.970278 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-07-20 02:52:15.970396 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-07-20 02:52:15.970496 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-07-20 02:52:15.970590 | ubuntu-noble | + 2026-07-20 02:52:15.970693 | ubuntu-noble | +## Virtualization stuff 2026-07-20 02:52:15.970790 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-07-20 02:52:15.970890 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-07-20 02:52:15.971029 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-07-20 02:52:15.971098 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-07-20 02:52:15.971199 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-07-20 02:52:15.971312 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-07-20 02:52:15.971414 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-07-20 02:52:15.971505 | ubuntu-noble | + 2026-07-20 02:52:15.971606 | ubuntu-noble | +#### VirtualBox on macOS 2026-07-20 02:52:15.971733 | ubuntu-noble | + 2026-07-20 02:52:15.971836 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-07-20 02:52:15.971936 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-07-20 02:52:15.972063 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-07-20 02:52:15.972164 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-07-20 02:52:15.972266 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-07-20 02:52:15.972383 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-07-20 02:52:15.972485 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-07-20 02:52:15.972586 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-07-20 02:52:15.972686 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-07-20 02:52:15.972787 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-07-20 02:52:15.972888 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-07-20 02:52:15.973008 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-07-20 02:52:15.973109 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-07-20 02:52:15.973285 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-07-20 02:52:15.973400 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-07-20 02:52:15.973508 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-07-20 02:52:15.973610 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-07-20 02:52:15.973702 | ubuntu-noble | + 2026-07-20 02:52:15.973806 | ubuntu-noble | +### Parallels Desktop on macOS 2026-07-20 02:52:15.973899 | ubuntu-noble | + 2026-07-20 02:52:15.974012 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-07-20 02:52:15.974121 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-07-20 02:52:15.974225 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-07-20 02:52:15.974340 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-07-20 02:52:15.974441 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-07-20 02:52:15.974542 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-07-20 02:52:15.974643 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-07-20 02:52:15.974747 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-07-20 02:52:15.974842 | ubuntu-noble | + 2026-07-20 02:52:15.974939 | ubuntu-noble | +### qemu on macOS 2026-07-20 02:52:15.975064 | ubuntu-noble | + 2026-07-20 02:52:15.975161 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-07-20 02:52:15.975264 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-07-20 02:52:15.975381 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-07-20 02:52:15.975485 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-07-20 02:52:15.975587 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-07-20 02:52:15.975680 | ubuntu-noble | + 2026-07-20 02:52:15.975804 | ubuntu-noble | +## Kubelet 2026-07-20 02:52:15.975907 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-07-20 02:52:15.976014 | ubuntu-noble | + 2026-07-20 02:52:15.976140 | ubuntu-noble | +# ipc system call 2026-07-20 02:52:15.976218 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-07-20 02:52:15.976326 | ubuntu-noble | + 2026-07-20 02:52:15.976422 | ubuntu-noble | +## msgctl 2026-07-20 02:52:15.976526 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-07-20 02:52:15.976621 | ubuntu-noble | +## msgget 2026-07-20 02:52:15.976725 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-07-20 02:52:15.976827 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:15.976932 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-07-20 02:52:15.977056 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-07-20 02:52:15.977147 | ubuntu-noble | + 2026-07-20 02:52:15.977245 | ubuntu-noble | +## semctl 2026-07-20 02:52:15.977363 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-07-20 02:52:15.977462 | ubuntu-noble | +## semget 2026-07-20 02:52:15.977566 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-07-20 02:52:15.977662 | ubuntu-noble | +## semop 2026-07-20 02:52:15.977765 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-07-20 02:52:15.977862 | ubuntu-noble | +## semtimedop 2026-07-20 02:52:15.977966 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-07-20 02:52:15.978092 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:15.978196 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-07-20 02:52:15.978314 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-07-20 02:52:15.978418 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-07-20 02:52:15.978521 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-07-20 02:52:15.978618 | ubuntu-noble | + 2026-07-20 02:52:15.978740 | ubuntu-noble | +## shmctl 2026-07-20 02:52:15.978853 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-07-20 02:52:15.978944 | ubuntu-noble | +## shmget 2026-07-20 02:52:15.979064 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-07-20 02:52:15.979165 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-07-20 02:52:15.979270 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-07-20 02:52:15.979390 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-07-20 02:52:15.979484 | ubuntu-noble | + 2026-07-20 02:52:15.979590 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-07-20 02:52:15.979705 | ubuntu-noble | + 2026-07-20 02:52:15.979822 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-07-20 02:52:15.979901 | ubuntu-noble | + 2026-07-20 02:52:15.980034 | ubuntu-noble | +## Common Shells 2026-07-20 02:52:15.980118 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-07-20 02:52:15.980219 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-07-20 02:52:15.980401 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-07-20 02:52:15.980443 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-07-20 02:52:15.980541 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-07-20 02:52:15.980640 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-07-20 02:52:15.982330 | ubuntu-noble | + 2026-07-20 02:52:15.982353 | ubuntu-noble | +## Root command executions 2026-07-20 02:52:15.982358 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-07-20 02:52:15.982362 | ubuntu-noble | + 2026-07-20 02:52:15.982366 | ubuntu-noble | +## File Deletion Events by User 2026-07-20 02:52:15.982369 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-07-20 02:52:15.982373 | ubuntu-noble | + 2026-07-20 02:52:15.982376 | ubuntu-noble | +## File Access 2026-07-20 02:52:15.982380 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-07-20 02:52:15.982384 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-07-20 02:52:15.982389 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-07-20 02:52:15.982393 | ubuntu-noble | + 2026-07-20 02:52:15.982396 | ubuntu-noble | +### Unsuccessful Creation 2026-07-20 02:52:15.982399 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-07-20 02:52:15.982403 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-07-20 02:52:15.982410 | ubuntu-noble | + 2026-07-20 02:52:15.982487 | ubuntu-noble | +### Unsuccessful Modification 2026-07-20 02:52:15.982648 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-07-20 02:52:15.982810 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-07-20 02:52:15.982938 | ubuntu-noble | + 2026-07-20 02:52:15.983077 | ubuntu-noble | +## 32bit API Exploitation 2026-07-20 02:52:15.983184 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-07-20 02:52:15.983313 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-07-20 02:52:15.983412 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-07-20 02:52:15.983531 | ubuntu-noble | +### bit API. 2026-07-20 02:52:15.983619 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-07-20 02:52:15.983731 | ubuntu-noble | + 2026-07-20 02:52:15.983871 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-07-20 02:52:15.983967 | ubuntu-noble | + 2026-07-20 02:52:15.984079 | ubuntu-noble | +##-e 2 2026-07-20 02:52:15.984171 | ubuntu-noble | 2026-07-20 02:52:15.984459 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1784515935.0615406-2506-141227104524412/.source.rules", "state": "file", "uid": 0} 2026-07-20 02:52:15.984549 | ubuntu-noble | 2026-07-20 02:52:15.984655 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-07-20 02:52:16.740502 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ActiveEnterTimestampMonotonic": "157076735", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:08 UTC", "AssertTimestampMonotonic": "157001979", "Before": "sysinit.target systemd-update-utmp.service shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "50120000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ConditionTimestampMonotonic": "157001940", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2418", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:08 UTC", "ExecMainStartTimestampMonotonic": "157045412", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2417 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2417 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2421 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:08 UTC] ; stop_time=[Mon 2026-07-20 02:52:08 UTC] ; pid=2421 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:08 UTC", "InactiveExitTimestampMonotonic": "157029595", "InvocationID": "f3037387b8144ad980ec1bf55c637a87", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2418", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-07-20 02:52:08 UTC", "StateChangeTimestampMonotonic": "157076735", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:16.742796 | debian-bookworm | 2026-07-20 02:52:16.742824 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-07-20 02:52:16.744635 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ActiveEnterTimestampMonotonic": "145605440", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:09 UTC", "AssertTimestampMonotonic": "145546091", "Before": "systemd-update-utmp.service ssh.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "43283000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ConditionTimestampMonotonic": "145545996", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2275", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ExecMainStartTimestampMonotonic": "145568234", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2274 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2274 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2279 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2279 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:09 UTC", "InactiveExitTimestampMonotonic": "145559148", "InvocationID": "c1c70574332e4d65acf5f1a07184a7f1", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2275", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3508432896", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2101248", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-07-20 02:52:09 UTC", "StateChangeTimestampMonotonic": "145605440", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:16.751681 | ubuntu-noble | 2026-07-20 02:52:16.752061 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-07-20 02:52:17.197464 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.109978", "end": "2026-07-20 02:52:17.144329", "msg": "", "rc": 0, "start": "2026-07-20 02:52:17.034351", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2807\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 309\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2807\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 238\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2807", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 309", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2807", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 238", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-07-20 02:52:17.197524 | debian-bookworm | 2026-07-20 02:52:17.197530 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-07-20 02:52:17.230882 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007340", "end": "2026-07-20 02:52:17.176123", "msg": "", "rc": 0, "start": "2026-07-20 02:52:17.168783", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-07-20 02:52:17.231019 | ubuntu-noble | 2026-07-20 02:52:17.231140 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-07-20 02:52:17.679991 | ubuntu-noble | --- before 2026-07-20 02:52:17.681356 | ubuntu-noble | +++ after 2026-07-20 02:52:17.681382 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-07-20 02:52:17.681386 | ubuntu-noble | { 2026-07-20 02:52:17.681390 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-07-20 02:52:17.682356 | ubuntu-noble | - "state": "file" 2026-07-20 02:52:17.682378 | ubuntu-noble | + "state": "absent" 2026-07-20 02:52:17.682382 | ubuntu-noble | } 2026-07-20 02:52:17.682445 | ubuntu-noble | 2026-07-20 02:52:17.682764 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-07-20 02:52:17.683136 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-07-20 02:52:17.683394 | ubuntu-noble | 2026-07-20 02:52:17.683668 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-07-20 02:52:18.031284 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:16 UTC", "ActiveEnterTimestampMonotonic": "165588903", "ActiveExitTimestamp": "Mon 2026-07-20 02:52:16 UTC", "ActiveExitTimestampMonotonic": "165342191", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:16 UTC", "AssertTimestampMonotonic": "165385104", "Before": "sysinit.target systemd-update-utmp.service shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "195118000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:16 UTC", "ConditionTimestampMonotonic": "165385034", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2807", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:16 UTC", "ExecMainStartTimestampMonotonic": "165428893", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:16 UTC] ; stop_time=[Mon 2026-07-20 02:52:16 UTC] ; pid=2806 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:16 UTC] ; stop_time=[Mon 2026-07-20 02:52:16 UTC] ; pid=2806 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:16 UTC] ; stop_time=[Mon 2026-07-20 02:52:16 UTC] ; pid=2810 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:16 UTC] ; stop_time=[Mon 2026-07-20 02:52:16 UTC] ; pid=2810 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-07-20 02:52:16 UTC", "InactiveEnterTimestampMonotonic": "165383882", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:16 UTC", "InactiveExitTimestampMonotonic": "165408837", "InvocationID": "394c90f20f344c439cacb6e199742a3f", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2807", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2076672", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-07-20 02:52:16 UTC", "StateChangeTimestampMonotonic": "165588903", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:18.033402 | debian-bookworm | 2026-07-20 02:52:18.033436 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-07-20 02:52:18.033442 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-07-20 02:52:18.033446 | debian-bookworm | 2026-07-20 02:52:18.137983 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-07-20 02:52:18.138472 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-07-20 02:52:18.138526 | debian-bookworm | 2026-07-20 02:52:18.138542 | debian-bookworm | DETAILS 2026-07-20 02:52:18.138586 | debian-bookworm | delegated > dependency: Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-07-20 02:52:18.138623 | debian-bookworm | delegated > create: Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-07-20 02:52:18.138660 | debian-bookworm | delegated > prepare: Executed: Successful 2026-07-20 02:52:18.138695 | debian-bookworm | delegated > converge: Executed: Successful 2026-07-20 02:52:18.138707 | debian-bookworm | 2026-07-20 02:52:18.138854 | debian-bookworm | SCENARIO RECAP 2026-07-20 02:52:18.138870 | debian-bookworm | delegated : actions=4 successful=1 disabled=0 skipped=0 missing=2 failed=0 2026-07-20 02:52:18.138886 | debian-bookworm | 2026-07-20 02:52:18.404213 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ActiveEnterTimestampMonotonic": "145605440", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:09 UTC", "AssertTimestampMonotonic": "145546091", "Before": "systemd-update-utmp.service ssh.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "44501000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ConditionTimestampMonotonic": "145545996", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2275", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:09 UTC", "ExecMainStartTimestampMonotonic": "145568234", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2274 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2274 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2279 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:09 UTC] ; stop_time=[Mon 2026-07-20 02:52:09 UTC] ; pid=2279 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:09 UTC", "InactiveExitTimestampMonotonic": "145559148", "InvocationID": "c1c70574332e4d65acf5f1a07184a7f1", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2275", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3546451968", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2101248", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-07-20 02:52:09 UTC", "StateChangeTimestampMonotonic": "145605440", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:18.409860 | ubuntu-noble | 2026-07-20 02:52:18.410163 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-07-20 02:52:18.818934 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.069981", "end": "2026-07-20 02:52:18.769501", "msg": "", "rc": 0, "start": "2026-07-20 02:52:18.699520", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2667\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 968\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2667\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 967\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2667", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 968", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2667", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 967", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-07-20 02:52:18.819041 | ubuntu-noble | 2026-07-20 02:52:18.819165 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-07-20 02:52:19.595941 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-07-20 02:52:18 UTC", "ActiveEnterTimestampMonotonic": "154763782", "ActiveExitTimestamp": "Mon 2026-07-20 02:52:18 UTC", "ActiveExitTimestampMonotonic": "154628183", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-07-20 02:52:18 UTC", "AssertTimestampMonotonic": "154668798", "Before": "systemd-update-utmp.service ssh.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "137015000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-07-20 02:52:18 UTC", "ConditionTimestampMonotonic": "154668714", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2667", "ExecMainStartTimestamp": "Mon 2026-07-20 02:52:18 UTC", "ExecMainStartTimestampMonotonic": "154695031", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-07-20 02:52:18 UTC] ; stop_time=[Mon 2026-07-20 02:52:18 UTC] ; pid=2666 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-07-20 02:52:18 UTC] ; stop_time=[Mon 2026-07-20 02:52:18 UTC] ; pid=2666 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-07-20 02:52:18 UTC] ; stop_time=[Mon 2026-07-20 02:52:18 UTC] ; pid=2670 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-07-20 02:52:18 UTC] ; stop_time=[Mon 2026-07-20 02:52:18 UTC] ; pid=2670 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-07-20 02:52:18 UTC", "InactiveEnterTimestampMonotonic": "154667300", "InactiveExitTimestamp": "Mon 2026-07-20 02:52:18 UTC", "InactiveExitTimestampMonotonic": "154677530", "InvocationID": "fe89ec5797504f9b9514e02f30f722ed", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2667", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3538698240", "MemoryCurrent": "1855488", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2113536", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-07-20 02:52:18 UTC", "StateChangeTimestampMonotonic": "154763782", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-07-20 02:52:19.596843 | ubuntu-noble | 2026-07-20 02:52:19.597060 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-07-20 02:52:19.597204 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-07-20 02:52:19.597342 | ubuntu-noble | 2026-07-20 02:52:19.686789 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-07-20 02:52:19.688357 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-07-20 02:52:19.688406 | ubuntu-noble | 2026-07-20 02:52:19.688412 | ubuntu-noble | DETAILS 2026-07-20 02:52:19.688417 | ubuntu-noble | delegated > dependency: Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-07-20 02:52:19.688421 | ubuntu-noble | delegated > create: Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-07-20 02:52:19.688426 | ubuntu-noble | delegated > prepare: Executed: Successful 2026-07-20 02:52:19.688430 | ubuntu-noble | delegated > converge: Executed: Successful 2026-07-20 02:52:19.688434 | ubuntu-noble | 2026-07-20 02:52:19.688438 | ubuntu-noble | SCENARIO RECAP 2026-07-20 02:52:19.688441 | ubuntu-noble | delegated : actions=4 successful=1 disabled=0 skipped=0 missing=2 failed=0 2026-07-20 02:52:19.688445 | ubuntu-noble | 2026-07-20 02:52:19.885415 | debian-bookworm | ok: Runtime: 0:00:18.400631 2026-07-20 02:52:19.929805 | ubuntu-noble | ok: Runtime: 0:00:19.880203 2026-07-20 02:52:19.960303 | 2026-07-20 02:52:19.960515 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-07-20 02:52:20.708340 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:52:20.720628 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:20.755167 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-07-20 02:52:20.765784 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:21.231812 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:21.232459 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:52:21.256042 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:52:21.261649 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-07-20 02:52:21.261721 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:52:21.306189 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-07-20 02:52:21.307406 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-07-20 02:52:21.333772 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-07-20 02:52:21.339739 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-07-20 02:52:21.339917 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-07-20 02:52:22.765527 | debian-bookworm | INFO [delegated > verify] Executing 2026-07-20 02:52:22.767136 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-07-20 02:52:22.768172 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:52:22.768185 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:52:22.768193 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:52:22.768201 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:52:22.768206 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:52:22.768212 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-07-20 02:52:22.768217 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:52:22.768222 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-07-20 02:52:22.768227 | debian-bookworm | 2026-07-20 02:52:22.768306 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:52:22.768312 | debian-bookworm | MOLECULE_DEBUG: True 2026-07-20 02:52:22.768318 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:52:22.768323 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-07-20 02:52:22.768328 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:52:22.768333 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:52:22.768338 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:52:22.768343 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:52:22.768348 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:52:22.768354 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:52:22.768359 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:52:22.768364 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:52:22.768369 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:52:22.768374 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:52:22.768379 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:52:22.768384 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:22.768389 | debian-bookworm | 2026-07-20 02:52:22.768469 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:22.905825 | ubuntu-noble | INFO [delegated > verify] Executing 2026-07-20 02:52:22.906975 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-07-20 02:52:22.907889 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-07-20 02:52:22.907948 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-07-20 02:52:22.907971 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-07-20 02:52:22.907989 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-07-20 02:52:22.908004 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-07-20 02:52:22.908019 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-07-20 02:52:22.908032 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-07-20 02:52:22.908045 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-07-20 02:52:22.908060 | ubuntu-noble | 2026-07-20 02:52:22.908084 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-07-20 02:52:22.908097 | ubuntu-noble | MOLECULE_DEBUG: True 2026-07-20 02:52:22.908110 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-07-20 02:52:22.908123 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-07-20 02:52:22.908136 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-07-20 02:52:22.908150 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-07-20 02:52:22.908163 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-07-20 02:52:22.908176 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-07-20 02:52:22.908190 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-07-20 02:52:22.908204 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-07-20 02:52:22.908217 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-07-20 02:52:22.908230 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-07-20 02:52:22.908244 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-07-20 02:52:22.908257 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-07-20 02:52:22.908270 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-07-20 02:52:22.908283 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:22.908329 | ubuntu-noble | 2026-07-20 02:52:22.908374 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-07-20 02:52:23.052753 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-07-20 02:52:23.068483 | debian-bookworm | ============================= test session starts ============================== 2026-07-20 02:52:23.068966 | debian-bookworm | platform linux -- Python 3.11.2, pytest-9.1.1, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-07-20 02:52:23.069431 | debian-bookworm | using: pytest-9.1.1 2026-07-20 02:52:23.069899 | debian-bookworm | registered third-party plugins: 2026-07-20 02:52:23.070240 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-07-20 02:52:23.070560 | debian-bookworm | rootdir: /home/zuul 2026-07-20 02:52:23.070968 | debian-bookworm | plugins: testinfra-10.2.2 2026-07-20 02:52:23.205109 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-07-20 02:52:23.221183 | ubuntu-noble | ============================= test session starts ============================== 2026-07-20 02:52:23.223327 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-9.1.1, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-07-20 02:52:23.223352 | ubuntu-noble | using: pytest-9.1.1 2026-07-20 02:52:23.223358 | ubuntu-noble | registered third-party plugins: 2026-07-20 02:52:23.223363 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-07-20 02:52:23.223368 | ubuntu-noble | rootdir: /home/zuul 2026-07-20 02:52:23.223373 | ubuntu-noble | plugins: testinfra-10.2.2 2026-07-20 02:52:24.115606 | debian-bookworm | collecting ... collected 6 items 2026-07-20 02:52:24.115733 | debian-bookworm | 2026-07-20 02:52:24.329559 | ubuntu-noble | collecting ... collected 6 items 2026-07-20 02:52:24.329640 | ubuntu-noble | 2026-07-20 02:52:28.644305 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-07-20 02:52:28.682253 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-07-20 02:52:28.933045 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-07-20 02:52:28.976139 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-07-20 02:52:31.363329 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-07-20 02:52:31.710163 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-07-20 02:52:36.534612 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-07-20 02:52:37.095186 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-07-20 02:52:37.890966 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-07-20 02:52:37.944758 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-07-20 02:52:37.945494 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-07-20 02:52:37.945659 | debian-bookworm | 2026-07-20 02:52:37.945809 | debian-bookworm | ============================== 6 passed in 14.86s ============================== 2026-07-20 02:52:37.997228 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-07-20 02:52:37.997713 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-07-20 02:52:37.998753 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-07-20 02:52:37.998907 | debian-bookworm | 2026-07-20 02:52:37.998961 | debian-bookworm | DETAILS 2026-07-20 02:52:37.999104 | debian-bookworm | delegated > verify: Executed: Successful 2026-07-20 02:52:37.999150 | debian-bookworm | 2026-07-20 02:52:37.999389 | debian-bookworm | SCENARIO RECAP 2026-07-20 02:52:37.999465 | debian-bookworm | delegated : actions=1 successful=0 disabled=0 skipped=0 missing=0 failed=0 2026-07-20 02:52:37.999531 | debian-bookworm | 2026-07-20 02:52:38.420437 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-07-20 02:52:38.472385 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-07-20 02:52:38.474523 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-07-20 02:52:38.474563 | ubuntu-noble | 2026-07-20 02:52:38.474575 | ubuntu-noble | ============================== 6 passed in 15.23s ============================== 2026-07-20 02:52:38.526874 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-07-20 02:52:38.529374 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-07-20 02:52:38.529407 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-07-20 02:52:38.529414 | ubuntu-noble | 2026-07-20 02:52:38.529420 | ubuntu-noble | DETAILS 2026-07-20 02:52:38.529425 | ubuntu-noble | delegated > verify: Executed: Successful 2026-07-20 02:52:38.529431 | ubuntu-noble | 2026-07-20 02:52:38.529436 | ubuntu-noble | SCENARIO RECAP 2026-07-20 02:52:38.529441 | ubuntu-noble | delegated : actions=1 successful=0 disabled=0 skipped=0 missing=0 failed=0 2026-07-20 02:52:38.529447 | ubuntu-noble | 2026-07-20 02:52:39.046133 | debian-bookworm | ok: Runtime: 0:00:17.705484 2026-07-20 02:52:39.060334 | ubuntu-noble | ok: Runtime: 0:00:18.206937 2026-07-20 02:52:39.069421 | 2026-07-20 02:52:39.069565 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-07-20 02:52:39.638034 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:52:39.639188 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:52:39.657898 | 2026-07-20 02:52:39.658027 | PLAY RECAP 2026-07-20 02:52:39.658100 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-07-20 02:52:39.658140 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-07-20 02:52:39.658166 | 2026-07-20 02:52:39.857481 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-07-20 02:52:39.860542 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-07-20 02:52:40.697005 | 2026-07-20 02:52:40.697202 | PLAY [Base post-fetch] 2026-07-20 02:52:40.724753 | 2026-07-20 02:52:40.725028 | TASK [diagnose-network : Ensure log directory exists] 2026-07-20 02:52:41.442223 | debian-bookworm | ok 2026-07-20 02:52:41.468696 | ubuntu-noble | ok 2026-07-20 02:52:41.477443 | 2026-07-20 02:52:41.477646 | TASK [diagnose-network : Snapshot dual-stack network state (post)] 2026-07-20 02:52:53.404480 | debian-bookworm | ok: Runtime: 0:00:05.974342 2026-07-20 02:52:53.462350 | ubuntu-noble | ok: Runtime: 0:00:05.773576 2026-07-20 02:52:53.470035 | 2026-07-20 02:52:53.470263 | TASK [diagnose-network : Snapshot Docker/BuildKit IPv6 config (teardown)] 2026-07-20 02:52:59.548141 | debian-bookworm | ok: Runtime: 0:00:00.011230 2026-07-20 02:52:59.730316 | ubuntu-noble | ok: Runtime: 0:00:00.011593 2026-07-20 02:52:59.736239 | 2026-07-20 02:52:59.736374 | TASK [diagnose-network : Probe container network namespace (teardown)] 2026-07-20 02:53:05.902070 | debian-bookworm | ok: Runtime: 0:00:00.011264 2026-07-20 02:53:05.968622 | ubuntu-noble | ok: Runtime: 0:00:00.007855 2026-07-20 02:53:05.987392 | 2026-07-20 02:53:05.987526 | TASK [fetch-output : Set log path for multiple nodes] 2026-07-20 02:53:06.070370 | debian-bookworm | ok 2026-07-20 02:53:06.078508 | ubuntu-noble | ok 2026-07-20 02:53:06.086557 | 2026-07-20 02:53:06.086678 | TASK [fetch-output : Set log path for single node] 2026-07-20 02:53:06.113150 | debian-bookworm | skipping: Conditional result was False 2026-07-20 02:53:06.134519 | ubuntu-noble | skipping: Conditional result was False 2026-07-20 02:53:06.145516 | 2026-07-20 02:53:06.145684 | LOOP [fetch-output : Ensure local output dirs] 2026-07-20 02:53:06.481051 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/logs/debian-bookworm" 2026-07-20 02:53:06.522312 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/logs/ubuntu-noble" 2026-07-20 02:53:06.879748 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/artifacts" 2026-07-20 02:53:07.052206 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/artifacts" 2026-07-20 02:53:07.334264 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/docs" 2026-07-20 02:53:07.462425 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/ccec4a8dcf0b44cf90ab410fd336d0c4/work/docs" 2026-07-20 02:53:07.462606 | ubuntu-noble -> localhost | changed: All items complete 2026-07-20 02:53:07.462655 | 2026-07-20 02:53:07.476188 | 2026-07-20 02:53:07.476359 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-07-20 02:53:08.347864 | debian-bookworm | changed: 2026-07-20 02:53:08.348569 | debian-bookworm | .d..t...... ./ 2026-07-20 02:53:08.348774 | debian-bookworm | >f+++++++++ net-debug.post.txt 2026-07-20 02:53:08.348839 | debian-bookworm | >f+++++++++ net-debug.pre.txt 2026-07-20 02:53:08.348924 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-07-20 02:53:08.348967 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-07-20 02:53:08.349004 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-07-20 02:53:08.359798 | ubuntu-noble | changed: 2026-07-20 02:53:08.360048 | ubuntu-noble | .d..t...... ./ 2026-07-20 02:53:08.360094 | ubuntu-noble | >f+++++++++ net-debug.post.txt 2026-07-20 02:53:08.360120 | ubuntu-noble | >f+++++++++ net-debug.pre.txt 2026-07-20 02:53:08.360142 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-07-20 02:53:08.360162 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-07-20 02:53:08.360182 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-07-20 02:53:08.915309 | ubuntu-noble | changed: .d..t...... ./ 2026-07-20 02:53:08.937996 | debian-bookworm | ok 2026-07-20 02:53:09.486912 | ubuntu-noble | changed: .d..t...... ./ 2026-07-20 02:53:09.514099 | debian-bookworm | ok 2026-07-20 02:53:09.514259 | debian-bookworm | changed: All items complete 2026-07-20 02:53:09.514298 | 2026-07-20 02:53:09.539724 | 2026-07-20 02:53:09.539938 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-07-20 02:53:09.891608 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.008263 2026-07-20 02:53:10.199250 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.009431 2026-07-20 02:53:10.217442 | 2026-07-20 02:53:10.217553 | PLAY RECAP 2026-07-20 02:53:10.217608 | debian-bookworm | ok: 8 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-07-20 02:53:10.217644 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-07-20 02:53:10.217666 | 2026-07-20 02:53:10.378528 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-07-20 02:53:10.381683 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-07-20 02:53:11.190376 | 2026-07-20 02:53:11.190573 | PLAY [Base post] 2026-07-20 02:53:11.204958 | 2026-07-20 02:53:11.205121 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-07-20 02:53:12.077650 | debian-bookworm | changed 2026-07-20 02:53:12.127345 | ubuntu-noble | changed 2026-07-20 02:53:12.139590 | 2026-07-20 02:53:12.139742 | PLAY RECAP 2026-07-20 02:53:12.139865 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-07-20 02:53:12.139908 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-07-20 02:53:12.139933 | 2026-07-20 02:53:12.309978 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-07-20 02:53:12.311478 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-07-20 02:53:13.155022 | 2026-07-20 02:53:13.155233 | PLAY [Base post-logs] 2026-07-20 02:53:13.189169 | 2026-07-20 02:53:13.189373 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-07-20 02:53:13.704366 | localhost | changed 2026-07-20 02:53:13.730303 | 2026-07-20 02:53:13.730547 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-07-20 02:53:13.758452 | localhost | ok 2026-07-20 02:53:13.766374 | 2026-07-20 02:53:13.766507 | TASK [Set zuul-log-path fact] 2026-07-20 02:53:13.793455 | localhost | ok 2026-07-20 02:53:13.803904 | 2026-07-20 02:53:13.804070 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-07-20 02:53:13.840806 | localhost | ok 2026-07-20 02:53:13.845194 | 2026-07-20 02:53:13.845335 | TASK [upload-logs : Create log directories] 2026-07-20 02:53:14.413815 | localhost | changed 2026-07-20 02:53:14.417924 | 2026-07-20 02:53:14.418057 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-07-20 02:53:14.979659 | localhost -> localhost | ok: Runtime: 0:00:00.011356 2026-07-20 02:53:14.984342 | 2026-07-20 02:53:14.984475 | TASK [upload-logs : Upload logs to log server] 2026-07-20 02:53:15.614351 | localhost | Output suppressed because no_log was given 2026-07-20 02:53:15.618498 | 2026-07-20 02:53:15.618679 | LOOP [upload-logs : Compress console log and json output] 2026-07-20 02:53:15.679479 | localhost | skipping: Conditional result was False 2026-07-20 02:53:15.685795 | localhost | skipping: Conditional result was False 2026-07-20 02:53:15.693570 | 2026-07-20 02:53:15.693790 | LOOP [upload-logs : Upload compressed console log and json output] 2026-07-20 02:53:15.762615 | localhost | skipping: Conditional result was False 2026-07-20 02:53:15.763459 | 2026-07-20 02:53:15.766651 | localhost | skipping: Conditional result was False 2026-07-20 02:53:15.780099 | 2026-07-20 02:53:15.780292 | LOOP [upload-logs : Upload console log and json output]