2026-06-02 08:50:20.436949 | Job console starting 2026-06-02 08:50:20.461751 | Updating git repos 2026-06-02 08:50:20.513178 | Cloning repos into workspace 2026-06-02 08:50:20.592231 | Restoring repo states 2026-06-02 08:50:20.609652 | Merging changes 2026-06-02 08:50:21.180476 | Checking out repos 2026-06-02 08:50:21.235949 | Preparing playbooks 2026-06-02 08:50:22.172257 | Running Ansible setup 2026-06-02 08:50:27.571423 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 08:50:28.342946 | 2026-06-02 08:50:28.343138 | PLAY [Base pre] 2026-06-02 08:50:28.361420 | 2026-06-02 08:50:28.361583 | TASK [Setup log path fact] 2026-06-02 08:50:28.392044 | debian-bookworm | ok 2026-06-02 08:50:28.407179 | 2026-06-02 08:50:28.407324 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 08:50:28.449344 | debian-bookworm | ok 2026-06-02 08:50:28.461593 | 2026-06-02 08:50:28.461737 | TASK [emit-job-header : Print job information] 2026-06-02 08:50:28.507661 | # Job Information 2026-06-02 08:50:28.508000 | Ansible Version: 2.16.14 2026-06-02 08:50:28.508075 | Job: ansible-collection-services-molecule-auditd 2026-06-02 08:50:28.508147 | Pipeline: check 2026-06-02 08:50:28.508197 | Executor: 521e9411259a 2026-06-02 08:50:28.508241 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 08:50:28.508288 | Event ID: 0ed99d50-5e60-11f1-81cc-5c2882bea733 2026-06-02 08:50:28.518273 | 2026-06-02 08:50:28.518434 | LOOP [emit-job-header : Print node information] 2026-06-02 08:50:28.641532 | debian-bookworm | ok: 2026-06-02 08:50:28.641818 | debian-bookworm | # Node Information 2026-06-02 08:50:28.641856 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 08:50:28.641882 | debian-bookworm | Hostname: debian 2026-06-02 08:50:28.641905 | debian-bookworm | Username: zuul 2026-06-02 08:50:28.641926 | debian-bookworm | Distro: Debian 12.14 2026-06-02 08:50:28.641950 | debian-bookworm | Provider: regiocloud-a 2026-06-02 08:50:28.641971 | debian-bookworm | Region: 2026-06-02 08:50:28.641992 | debian-bookworm | Label: debian-bookworm 2026-06-02 08:50:28.642012 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 08:50:28.642032 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fedc:674c 2026-06-02 08:50:28.713628 | debian-bookworm | ok: 2026-06-02 08:50:28.713799 | debian-bookworm | # Node Information 2026-06-02 08:50:28.713844 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 08:50:28.713878 | debian-bookworm | Hostname: ubuntu 2026-06-02 08:50:28.713912 | debian-bookworm | Username: zuul 2026-06-02 08:50:28.713942 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 08:50:28.713970 | debian-bookworm | Provider: regiocloud-a 2026-06-02 08:50:28.713998 | debian-bookworm | Region: 2026-06-02 08:50:28.714025 | debian-bookworm | Label: ubuntu-noble 2026-06-02 08:50:28.714052 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 08:50:28.714079 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fee0:59cb 2026-06-02 08:50:28.731900 | 2026-06-02 08:50:28.732059 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 08:50:29.252564 | debian-bookworm -> localhost | changed 2026-06-02 08:50:29.261536 | 2026-06-02 08:50:29.261658 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 08:50:30.317197 | debian-bookworm -> localhost | changed 2026-06-02 08:50:30.470596 | ubuntu-noble -> localhost | ok 2026-06-02 08:50:30.486492 | 2026-06-02 08:50:30.486627 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 08:50:30.787820 | debian-bookworm -> localhost | ok 2026-06-02 08:50:30.799068 | 2026-06-02 08:50:30.799384 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 08:50:30.834430 | debian-bookworm | ok 2026-06-02 08:50:30.841187 | ubuntu-noble | ok 2026-06-02 08:50:30.870062 | debian-bookworm | included: /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 08:50:30.870204 | ubuntu-noble | included: /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 08:50:30.878857 | 2026-06-02 08:50:30.879136 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 08:50:32.709491 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 08:50:32.709971 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/e96892ef10c24d54bb2af3866302b3de_id_rsa 2026-06-02 08:50:32.710070 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/e96892ef10c24d54bb2af3866302b3de_id_rsa.pub 2026-06-02 08:50:32.710137 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 08:50:32.710198 | debian-bookworm -> localhost | SHA256:1OcHtcbRpVXr2EFqJGBpM52auC7oqgPiOCZSFpd/IUs zuul-build-sshkey 2026-06-02 08:50:32.710255 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 08:50:32.710321 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 08:50:32.710377 | debian-bookworm -> localhost | | o+...oo*| 2026-06-02 08:50:32.710430 | debian-bookworm -> localhost | | .* oooo=o| 2026-06-02 08:50:32.710480 | debian-bookworm -> localhost | | . + * oo=o | 2026-06-02 08:50:32.710530 | debian-bookworm -> localhost | | . o Eo.o o.o+ .| 2026-06-02 08:50:32.710578 | debian-bookworm -> localhost | | o o oS. ...o | 2026-06-02 08:50:32.710626 | debian-bookworm -> localhost | |o o o.. . | 2026-06-02 08:50:32.710674 | debian-bookworm -> localhost | |=o . .. | 2026-06-02 08:50:32.710724 | debian-bookworm -> localhost | |*o . . . | 2026-06-02 08:50:32.710854 | debian-bookworm -> localhost | |*+o. . | 2026-06-02 08:50:32.710916 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 08:50:32.711047 | debian-bookworm -> localhost | ok: Runtime: 0:00:01.284686 2026-06-02 08:50:32.723848 | 2026-06-02 08:50:32.724018 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 08:50:32.759081 | debian-bookworm | ok 2026-06-02 08:50:32.773850 | ubuntu-noble | ok 2026-06-02 08:50:32.787622 | debian-bookworm | included: /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 08:50:32.787707 | ubuntu-noble | included: /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 08:50:32.800329 | 2026-06-02 08:50:32.800432 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 08:50:32.826876 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:50:32.837813 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:50:32.843722 | 2026-06-02 08:50:32.843847 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 08:50:33.499250 | debian-bookworm | changed 2026-06-02 08:50:33.588751 | ubuntu-noble | changed 2026-06-02 08:50:33.595618 | 2026-06-02 08:50:33.595737 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 08:50:33.857441 | debian-bookworm | ok 2026-06-02 08:50:33.911470 | ubuntu-noble | ok 2026-06-02 08:50:33.924522 | 2026-06-02 08:50:33.924744 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 08:50:34.634180 | debian-bookworm | changed 2026-06-02 08:50:34.767769 | ubuntu-noble | changed 2026-06-02 08:50:34.780970 | 2026-06-02 08:50:34.781328 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 08:50:35.481076 | debian-bookworm | changed 2026-06-02 08:50:35.563046 | ubuntu-noble | changed 2026-06-02 08:50:35.571535 | 2026-06-02 08:50:35.571677 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 08:50:35.599925 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:50:35.611245 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:50:35.624998 | 2026-06-02 08:50:35.625181 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 08:50:36.029303 | debian-bookworm -> localhost | changed 2026-06-02 08:50:36.059909 | 2026-06-02 08:50:36.060070 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 08:50:36.440042 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/e96892ef10c24d54bb2af3866302b3de_id_rsa (zuul-build-sshkey) 2026-06-02 08:50:36.440299 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.010003 2026-06-02 08:50:36.447151 | 2026-06-02 08:50:36.447271 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 08:50:36.809811 | debian-bookworm | ok 2026-06-02 08:50:36.843400 | ubuntu-noble | ok 2026-06-02 08:50:36.851856 | 2026-06-02 08:50:36.852003 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 08:50:36.887857 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:50:36.899065 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:50:36.917504 | 2026-06-02 08:50:36.917618 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 08:50:37.314275 | debian-bookworm | ok 2026-06-02 08:50:37.350672 | ubuntu-noble | ok 2026-06-02 08:50:37.366794 | 2026-06-02 08:50:37.367028 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 08:50:37.398764 | debian-bookworm | ok 2026-06-02 08:50:37.413921 | ubuntu-noble | ok 2026-06-02 08:50:37.419135 | 2026-06-02 08:50:37.419259 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 08:50:37.710162 | debian-bookworm -> localhost | ok 2026-06-02 08:50:37.723911 | 2026-06-02 08:50:37.724102 | TASK [validate-host : Collect information about the host] 2026-06-02 08:50:38.808458 | debian-bookworm | ok 2026-06-02 08:50:38.989892 | ubuntu-noble | ok 2026-06-02 08:50:39.000428 | 2026-06-02 08:50:39.000560 | TASK [validate-host : Sanitize hostname] 2026-06-02 08:50:39.061377 | debian-bookworm | ok 2026-06-02 08:50:39.078050 | ubuntu-noble | ok 2026-06-02 08:50:39.084138 | 2026-06-02 08:50:39.084269 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 08:50:39.628695 | debian-bookworm -> localhost | changed 2026-06-02 08:50:39.634076 | ubuntu-noble -> localhost | changed 2026-06-02 08:50:39.645510 | 2026-06-02 08:50:39.645660 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 08:50:40.117817 | debian-bookworm | ok 2026-06-02 08:50:40.164166 | ubuntu-noble | ok 2026-06-02 08:50:40.169578 | 2026-06-02 08:50:40.169705 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 08:50:40.723150 | debian-bookworm -> localhost | changed 2026-06-02 08:50:40.724329 | ubuntu-noble -> localhost | changed 2026-06-02 08:50:40.737711 | 2026-06-02 08:50:40.737862 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 08:50:41.008803 | debian-bookworm | ok 2026-06-02 08:50:41.067403 | ubuntu-noble | ok 2026-06-02 08:50:41.075506 | 2026-06-02 08:50:41.075652 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 08:50:42.314456 | debian-bookworm | changed: 2026-06-02 08:50:42.314730 | debian-bookworm | cd+++++++++ src/ 2026-06-02 08:50:42.314818 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 08:50:42.314874 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 08:50:42.314898 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 08:50:42.314919 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:03.468610 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:03.499805 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:04.118732 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:04.119408 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:04.142537 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:04.148551 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 08:52:04.148782 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:04.103008 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:04.103632 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:04.124238 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:04.129679 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 08:52:04.129882 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:05.308083 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 08:52:05.308459 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:52:05.512148 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 08:52:05.512830 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:52:05.679600 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 08:52:05.679680 | debian-bookworm | config file = None 2026-06-02 08:52:05.679689 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:52:05.679696 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:52:05.679708 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 08:52:05.679728 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:52:05.679736 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:52:05.680029 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:52:05.680289 | debian-bookworm | libyaml = True 2026-06-02 08:52:05.680558 | debian-bookworm | No config file found; using defaults 2026-06-02 08:52:05.680813 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:52:05.681243 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 08:52:05.681614 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 08:52:05.685173 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 08:52:05.685624 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 08:52:05.686411 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:52:05.686822 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:52:05.687293 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 08:52:05.687643 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:52:05.689998 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 08:52:05.690442 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 08:52:05.690779 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:52:05.691227 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:52:05.692936 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 08:52:05.693318 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:52:05.693858 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 08:52:05.694155 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 08:52:05.694590 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:52:05.694896 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:52:05.696060 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 08:52:05.696519 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 08:52:05.696761 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:52:05.696984 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:52:05.697274 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:52:05.697511 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:52:05.697723 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:52:05.698011 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:52:05.698205 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 08:52:05.698556 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 08:52:05.699892 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:52:05.700262 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:52:05.700556 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:52:05.700827 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:52:05.702915 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:52:05.703183 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:52:05.703597 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:52:05.703873 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:52:05.704145 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 08:52:05.704426 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 08:52:05.704825 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:52:05.705096 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:52:05.705445 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 08:52:05.705751 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 08:52:05.706115 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:52:05.706470 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:52:05.706958 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:52:05.707248 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:52:05.708079 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 08:52:05.708404 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:52:05.748812 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 08:52:05.749207 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 08:52:05.749540 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:52:05.749828 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:52:05.750112 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 08:52:05.750482 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 08:52:05.750763 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:52:05.751048 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:52:05.751485 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:52:05.751774 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:52:05.752049 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:52:05.752367 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:52:05.752738 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:52:05.753086 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:52:05.753330 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 08:52:05.753600 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 08:52:05.753847 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:52:05.754093 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:52:05.754501 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:52:05.754811 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:52:05.755225 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:52:05.755514 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:52:05.755781 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 08:52:05.756050 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 08:52:05.756700 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:52:05.756990 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:52:05.757420 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 08:52:05.757780 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:52:05.758912 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 08:52:05.759234 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 08:52:05.760342 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:52:05.760686 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:52:05.761014 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:52:05.761337 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:52:05.761691 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:52:05.762035 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:52:05.762258 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 08:52:05.762641 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:52:05.763024 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 08:52:05.763322 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:52:05.763866 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 08:52:05.764192 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 08:52:05.764578 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:52:05.764897 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:52:05.765891 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:52:05.766331 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:52:05.766772 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:52:05.767064 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:52:05.767402 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:52:05.767721 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:52:05.768200 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 08:52:05.768535 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 08:52:05.768844 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:52:05.769111 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:52:05.769504 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 08:52:05.769814 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:52:05.772556 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:52:05.772890 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:52:05.773663 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:52:05.774002 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:52:05.775827 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:52:05.776166 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:52:05.776363 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 08:52:05.776733 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 08:52:05.778132 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 08:52:05.778503 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:52:05.778943 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 08:52:05.779264 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:52:05.779482 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 08:52:05.779769 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:52:05.781053 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 08:52:05.781382 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:52:05.782043 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:52:05.782374 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:52:05.782798 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:52:05.783107 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:52:05.784715 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:52:05.785013 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:52:05.786018 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:52:05.786350 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:52:05.786574 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:52:05.786946 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:52:05.787141 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:52:05.787474 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:52:05.787777 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:52:05.788071 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:52:05.788555 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:52:05.788843 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:52:05.789499 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:52:05.789807 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:52:05.790233 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 08:52:05.790548 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:52:05.792524 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:52:05.792865 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:52:05.793162 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:52:05.793440 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:52:05.793819 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 08:52:05.794082 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:52:05.794909 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:52:05.795220 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:52:05.795417 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 08:52:05.795744 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:52:05.796107 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 08:52:05.796392 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:52:05.796627 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:52:05.796911 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:52:05.797138 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:52:05.797431 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:52:05.803336 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:52:05.803721 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:52:05.804255 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 08:52:05.804607 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 08:52:05.806155 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 08:52:05.806511 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 08:52:05.806865 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:52:05.807174 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:52:05.807495 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:52:05.807779 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:52:05.808081 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:52:05.808372 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:52:05.808864 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 08:52:05.809171 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 08:52:05.817679 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 08:52:05.818039 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 08:52:05.818538 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:52:05.818853 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:52:05.819624 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:52:05.819963 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:52:05.820971 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:52:05.821277 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:52:05.821638 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:52:05.821979 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:52:05.822189 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:52:05.822500 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:52:05.822717 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:52:05.823025 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:52:05.823512 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:52:05.823821 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:52:05.824035 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 08:52:05.824278 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:52:05.824646 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:52:05.824991 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:52:05.825316 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:52:05.825618 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:52:05.828974 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:52:05.829295 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:52:05.829522 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:52:05.829837 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:52:05.834398 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:52:05.834776 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:52:05.838811 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 08:52:05.839177 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 08:52:05.839475 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 08:52:05.921252 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 08:52:05.921310 | ubuntu-noble | config file = None 2026-06-02 08:52:05.921318 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:52:05.921324 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:52:05.921334 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 08:52:05.921342 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:52:05.921389 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:52:05.921555 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:52:05.921692 | ubuntu-noble | libyaml = True 2026-06-02 08:52:05.921828 | ubuntu-noble | No config file found; using defaults 2026-06-02 08:52:05.922103 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:52:05.934188 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:52:05.934393 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:52:05.947775 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 08:52:05.948330 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 08:52:05.948745 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:52:05.949191 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:52:05.949521 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:52:05.949842 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:52:05.950115 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 08:52:05.950571 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:52:05.950913 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 08:52:05.951290 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 08:52:05.951661 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:52:05.951999 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:52:05.952363 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 08:52:05.952783 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:52:05.953130 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 08:52:05.953552 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 08:52:05.953892 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:52:05.954224 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:52:05.956237 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 08:52:05.956268 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:52:05.956274 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:52:05.956282 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:52:05.957261 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:52:05.957623 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:52:05.958013 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:52:05.958341 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:52:05.958622 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:52:05.958930 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:52:05.959356 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:52:05.959621 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:52:05.959940 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:52:05.960246 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:52:05.960526 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:52:05.960895 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:52:05.961192 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:52:05.961963 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:52:05.962847 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:52:05.963071 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:52:05.963403 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:52:05.963736 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:52:05.964322 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:52:05.964563 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:52:05.965057 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 08:52:05.965372 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:52:05.988935 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 08:52:05.989452 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 08:52:05.995233 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:52:05.995715 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:52:05.996500 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:52:05.997230 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:52:05.997402 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 08:52:05.997767 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 08:52:05.998161 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 08:52:05.998601 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:52:05.998993 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:52:05.999407 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:52:05.999826 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:52:06.000233 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:52:06.002242 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:52:06.002280 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:52:06.002286 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:52:06.002290 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:52:06.004180 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:52:06.005795 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:52:06.007167 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:52:06.007729 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:52:06.008283 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:52:06.008753 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:52:06.012364 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:52:06.012914 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:52:06.014274 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 08:52:06.014789 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 08:52:06.034004 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 08:52:06.034648 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 08:52:06.035869 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:52:06.036382 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:52:06.036921 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:52:06.037314 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:52:06.042592 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:52:06.043022 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:52:06.043378 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:52:06.043825 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:52:06.044219 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:52:06.044579 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:52:06.046228 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 08:52:06.046281 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 08:52:06.046643 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 08:52:06.046875 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 08:52:06.047559 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:52:06.047823 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:52:06.048137 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:52:06.048412 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:52:06.048938 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:52:06.049220 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:52:06.049427 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:52:06.049738 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:52:06.049924 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:52:06.050183 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:52:06.050720 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:52:06.050985 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:52:06.052795 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:52:06.053159 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:52:06.053399 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:52:06.053716 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:52:06.053978 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 08:52:06.054221 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 08:52:06.054914 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:52:06.055218 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:52:06.057525 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:52:06.057863 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:52:06.058883 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:52:06.059145 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:52:06.059522 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 08:52:06.059780 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 08:52:06.059955 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 08:52:06.060211 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 08:52:06.063004 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:52:06.063315 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:52:06.063600 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 08:52:06.063893 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 08:52:06.064331 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 08:52:06.064600 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 08:52:06.065049 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 08:52:06.065313 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 08:52:06.066113 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:52:06.066314 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:52:06.066576 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 08:52:06.066824 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:52:06.067052 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 08:52:06.067290 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 08:52:06.067640 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 08:52:06.067870 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:52:06.069099 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:52:06.069381 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:52:06.069750 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 08:52:06.070002 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 08:52:06.070410 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:52:06.070670 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:52:06.070905 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:52:06.071131 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:52:06.071319 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:52:06.071609 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:52:06.073129 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 08:52:06.073443 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:52:06.115387 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 08:52:06.115499 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 08:52:06.117338 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:52:06.117373 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:52:06.117384 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:52:06.117391 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:52:06.118357 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:52:06.118392 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:52:06.118752 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:52:06.119063 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:52:06.119366 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:52:06.119677 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:52:06.120003 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:52:06.120336 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:52:06.120638 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:52:06.120938 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:52:06.121390 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 08:52:06.121411 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:52:06.121768 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:52:06.122035 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:52:06.122396 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 08:52:06.122732 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:52:06.122972 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 08:52:06.123227 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:52:06.123488 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 08:52:06.123761 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:52:06.126668 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 08:52:06.128271 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 08:52:06.128329 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:52:06.128729 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:52:06.129074 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 08:52:06.129494 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:52:06.130014 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 08:52:06.130386 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:52:06.131292 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 08:52:06.131621 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 08:52:06.132399 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:52:06.132730 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:52:06.133020 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:52:06.133322 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:52:06.133658 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 08:52:06.133949 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:52:06.134543 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:52:06.134566 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:52:06.135819 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:52:06.135873 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:52:06.138296 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:52:06.138370 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:52:06.138938 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 08:52:06.139625 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:52:06.140066 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:52:06.140462 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:52:06.143636 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 08:52:06.144109 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 08:52:06.144558 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 08:52:06.184231 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 08:52:06.184769 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 08:52:06.405370 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 08:52:06.405734 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 08:52:06.749046 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 08:52:06.956773 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 08:52:07.508122 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 08:52:08.095953 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 08:52:08.096267 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 08:52:08.441762 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 08:52:09.104647 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 08:52:09.105243 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 08:52:09.675055 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 08:52:09.675371 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 08:52:09.894161 | debian-bookworm | Starting galaxy collection install process 2026-06-02 08:52:09.894503 | debian-bookworm | Process install dependency map 2026-06-02 08:52:09.894833 | debian-bookworm | Starting collection install process 2026-06-02 08:52:09.895122 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 08:52:09.895421 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 08:52:09.895711 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 08:52:09.895998 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 08:52:09.896296 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1838wg6_kndk/tmpm5d5u7ow/osism-commons-0.20260601.0-k_gebcjq 2026-06-02 08:52:09.896626 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:52:09.896912 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 08:52:09.990217 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:52:09.990660 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 08:52:09.991129 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:52:10.389709 | debian-bookworm | ok: Runtime: 0:00:06.934714 2026-06-02 08:52:10.458685 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 08:52:10.458751 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 08:52:10.630281 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 08:52:10.630355 | ubuntu-noble | Process install dependency map 2026-06-02 08:52:10.630780 | ubuntu-noble | Starting collection install process 2026-06-02 08:52:10.631190 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 08:52:10.631668 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 08:52:10.631905 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 08:52:10.632125 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 08:52:10.632408 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-171670fvakwr/tmpyu2_hpal/osism-commons-0.20260601.0-1xl9sitr 2026-06-02 08:52:10.632916 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:52:10.632934 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 08:52:10.724822 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:52:10.727273 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 08:52:10.727326 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:52:10.877272 | ubuntu-noble | ok: Runtime: 0:00:07.637970 2026-06-02 08:52:10.887831 | 2026-06-02 08:52:10.887975 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 08:52:11.450638 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:52:11.452193 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:52:11.466523 | 2026-06-02 08:52:11.466716 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 08:52:12.218613 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:12.229858 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:12.107323 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:12.117367 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:12.769409 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:12.770049 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:12.793491 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:12.799340 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 08:52:12.799409 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:12.583657 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:12.584260 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:12.604386 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:12.609998 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 08:52:12.610090 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:13.840187 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 08:52:14.197646 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 08:52:14.154098 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 08:52:14.154157 | debian-bookworm | config file = None 2026-06-02 08:52:14.154173 | debian-bookworm | configured module search path = 2026-06-02 08:52:14.154179 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:52:14.154186 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:52:14.154191 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:52:14.154195 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 08:52:14.154199 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:52:14.154203 | debian-bookworm | libyaml = True 2026-06-02 08:52:14.154276 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:14.154282 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:14.154312 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:14.154317 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:14.154321 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:14.154325 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:52:14.154329 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:14.154333 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:14.154336 | debian-bookworm | 2026-06-02 08:52:14.154592 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:14.154598 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:52:14.154602 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:14.154605 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:14.154609 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:14.154613 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:14.154618 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:14.154622 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:14.154626 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:14.154630 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:14.154634 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:14.154638 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:14.154642 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:14.154646 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:14.154649 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:14.154678 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:14.154682 | debian-bookworm | 2026-06-02 08:52:14.154986 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:14.399789 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:52:14.578667 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 08:52:14.578726 | ubuntu-noble | config file = None 2026-06-02 08:52:14.578743 | ubuntu-noble | configured module search path = 2026-06-02 08:52:14.578749 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:52:14.578755 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:52:14.578759 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:52:14.578762 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 08:52:14.578766 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:52:14.578770 | ubuntu-noble | libyaml = True 2026-06-02 08:52:14.578967 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:14.578972 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:14.578976 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:14.578979 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:14.578983 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:14.578987 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:52:14.578990 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:14.578994 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:14.578997 | ubuntu-noble | 2026-06-02 08:52:14.579115 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:14.579121 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:52:14.579124 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:14.579127 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:14.579131 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:14.579134 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:14.579138 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:14.579142 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:14.579145 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:14.579149 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:14.579152 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:14.579156 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:14.579159 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:14.579163 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:14.579166 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:14.579169 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:14.579173 | ubuntu-noble | 2026-06-02 08:52:14.579408 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:14.917348 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:52:14.617548 | debian-bookworm | 2026-06-02 08:52:14.618236 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 08:52:14.618878 | debian-bookworm | 2026-06-02 08:52:14.619391 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:52:15.196286 | ubuntu-noble | 2026-06-02 08:52:15.196357 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 08:52:15.196750 | ubuntu-noble | 2026-06-02 08:52:15.198833 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:52:15.559991 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 08:52:15.560155 | debian-bookworm | 2026-06-02 08:52:15.560527 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 08:52:16.485620 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 08:52:16.485829 | ubuntu-noble | 2026-06-02 08:52:16.485991 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 08:52:19.584528 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.0 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.0 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:19.584657 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.2 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.2 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:19.584672 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:19.584750 | debian-bookworm | 2026-06-02 08:52:19.584864 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 08:52:19.604434 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 08:52:19.604535 | debian-bookworm | 2026-06-02 08:52:19.604667 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 08:52:19.604826 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:52:19.604942 | debian-bookworm | 2026-06-02 08:52:19.663331 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:52:19.663576 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:52:20.050233 | debian-bookworm | ok: Runtime: 0:00:07.905059 2026-06-02 08:52:21.476704 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:21.477826 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.5 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.5 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:21.478138 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:52:21.478737 | ubuntu-noble | 2026-06-02 08:52:21.479063 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 08:52:21.497964 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 08:52:21.499277 | ubuntu-noble | 2026-06-02 08:52:21.499329 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 08:52:21.499337 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:52:21.499343 | ubuntu-noble | 2026-06-02 08:52:21.742949 | ubuntu-noble | ok: Runtime: 0:00:09.836601 2026-06-02 08:52:21.753043 | 2026-06-02 08:52:21.753195 | TASK [ansible-molecule : Reset connection] 2026-06-02 08:52:21.801063 | 2026-06-02 08:52:21.801639 | TASK [ansible-molecule : Reset connection] 2026-06-02 08:52:21.838642 | 2026-06-02 08:52:21.838821 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 08:52:21.602300 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:52:21.603067 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:52:22.793072 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:22.804466 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:22.610228 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:22.619594 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:23.328263 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:23.329074 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:23.351230 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:23.357145 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 08:52:23.357195 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:23.018456 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:23.019012 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:23.038713 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:23.044111 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 08:52:23.044170 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:24.067537 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 08:52:24.067826 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:52:24.382162 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 08:52:24.382687 | debian-bookworm | config file = None 2026-06-02 08:52:24.383126 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:52:24.383571 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:52:24.384002 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 08:52:24.384402 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:52:24.384735 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:52:24.385177 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:52:24.385493 | debian-bookworm | libyaml = True 2026-06-02 08:52:24.385785 | debian-bookworm | No config file found; using defaults 2026-06-02 08:52:24.386274 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:52:24.387887 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 08:52:24.389447 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:52:24.390713 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:52:24.391077 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:52:24.395303 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 08:52:24.395674 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:52:24.396036 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:52:24.396370 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:52:24.397334 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:52:24.397689 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:52:24.399486 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:52:24.399880 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:52:24.400257 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:52:24.400546 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:52:24.400934 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:52:24.401309 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:52:24.401587 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:52:24.401991 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:52:24.402751 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 08:52:24.403330 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 08:52:24.403648 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 08:52:24.403973 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:52:24.404356 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:52:24.404643 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:52:24.405184 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 08:52:24.405525 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:52:24.405870 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:52:24.406125 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:52:24.406554 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:52:24.406818 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:52:24.407181 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:52:24.407439 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:52:24.407769 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:52:24.408104 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:52:24.408442 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:52:24.408701 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:52:24.409089 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:52:24.761788 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 08:52:24.762254 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:52:24.409521 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:52:24.409710 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 08:52:24.410010 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 08:52:24.410722 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:52:24.411013 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:52:24.412302 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 08:52:24.412569 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:52:24.413024 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:52:24.413297 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:52:24.413970 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:52:24.414254 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:52:24.414582 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:52:24.414875 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:52:24.415432 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:52:24.415700 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:52:24.416070 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 08:52:24.416342 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:52:24.417662 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 08:52:24.417978 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:52:24.418252 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:52:24.418550 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:52:24.419223 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:52:24.419495 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:52:24.419762 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:52:24.420051 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:52:24.420319 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 08:52:24.420582 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:52:24.422046 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:52:24.422382 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:52:24.422698 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:52:24.422946 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:52:24.423174 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:52:24.423401 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:52:24.423630 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:52:24.423891 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:52:24.424325 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 08:52:24.424557 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 08:52:24.425348 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 08:52:24.425575 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:52:24.425806 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 08:52:24.426049 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 08:52:24.426304 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 08:52:24.426538 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 08:52:24.426764 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:52:24.427022 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:52:24.427350 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:52:24.427563 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:52:24.429032 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 08:52:24.429296 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 08:52:24.430212 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:52:24.430518 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:52:24.430733 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:52:24.430994 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:52:24.431524 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:52:24.431734 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:52:24.432210 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:52:24.432426 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:52:24.433344 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:52:24.433559 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:52:24.435555 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:52:24.435824 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:52:24.436166 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 08:52:24.436377 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:52:24.437073 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:52:24.437283 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:52:24.437949 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 08:52:24.438277 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 08:52:24.438623 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:52:24.438849 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:52:24.439342 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:52:24.439554 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:52:24.439902 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:52:24.440119 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:52:24.440499 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:52:24.440711 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:52:24.441078 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 08:52:24.441292 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 08:52:24.441666 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 08:52:24.441906 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:52:24.442800 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:52:24.443301 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:52:24.444455 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:52:24.444886 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:52:24.445286 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:52:24.445690 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:52:24.446046 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 08:52:24.446528 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 08:52:24.446826 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:52:24.447158 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:52:24.447556 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 08:52:24.447887 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 08:52:24.450466 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 08:52:24.450898 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 08:52:24.451197 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:52:24.451607 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:52:24.451925 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 08:52:24.452285 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:52:24.452647 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 08:52:24.452950 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 08:52:24.453231 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:52:24.453515 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:52:24.453941 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:52:24.454212 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:52:24.454519 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 08:52:24.454782 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:52:24.455154 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 08:52:24.455406 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 08:52:24.463611 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 08:52:24.464119 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 08:52:24.464466 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:52:24.465019 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:52:24.497834 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 08:52:24.498421 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 08:52:24.500217 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 08:52:24.500682 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 08:52:24.501248 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:52:24.501668 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:52:24.502064 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:52:24.502446 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:52:24.503079 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:52:24.503378 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:52:24.503627 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:52:24.503918 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:52:24.504177 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:52:24.504573 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:52:24.504824 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 08:52:24.505097 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:52:24.505355 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:52:24.505602 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:52:24.505867 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:52:24.506119 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:52:24.506425 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 08:52:24.506778 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:52:24.507047 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:52:24.507293 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:52:24.507598 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 08:52:24.507934 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 08:52:24.508179 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:52:24.508517 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:52:24.513274 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:52:24.513588 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:52:24.513948 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:52:24.514201 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:52:24.514791 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 08:52:24.515143 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 08:52:24.517384 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:52:24.517714 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:52:24.520922 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:52:24.521269 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:52:24.521608 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:52:24.521895 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:52:24.522262 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 08:52:24.522588 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 08:52:24.522948 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 08:52:24.523195 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:52:24.523528 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 08:52:24.523776 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 08:52:24.524150 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:52:24.524404 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:52:24.524824 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:52:24.525104 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:52:24.525442 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 08:52:24.525686 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:52:24.526071 | debian-bookworm | Starting galaxy collection install process 2026-06-02 08:52:24.526356 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 08:52:24.572267 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:52:24.572485 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 08:52:24.589923 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 08:52:24.592809 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 08:52:24.602246 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 08:52:24.602365 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 08:52:24.602463 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:52:24.610167 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 08:52:25.196063 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 08:52:25.198308 | ubuntu-noble | config file = None 2026-06-02 08:52:25.213853 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:52:25.213904 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:52:25.213932 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 08:52:25.213946 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:52:25.213955 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:52:25.213962 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:52:25.213969 | ubuntu-noble | libyaml = True 2026-06-02 08:52:25.213976 | ubuntu-noble | No config file found; using defaults 2026-06-02 08:52:25.215702 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:52:25.230230 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:52:25.230296 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:52:25.230310 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 08:52:25.231313 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:52:25.245259 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 08:52:25.245314 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:52:25.245329 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:52:25.245612 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:52:25.246177 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:52:25.246604 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:52:25.246970 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 08:52:25.247590 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:52:25.250641 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 08:52:25.251166 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 08:52:25.251677 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:52:25.252033 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:52:25.252558 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:52:25.252917 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:52:25.253256 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:52:25.253704 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:52:25.254143 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:52:25.254583 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:52:25.255247 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:52:25.257256 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:52:25.257307 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:52:25.257317 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:52:25.257325 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:52:25.257332 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:52:25.257535 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 08:52:25.257949 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 08:52:25.258359 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 08:52:25.258763 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 08:52:25.289055 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 08:52:25.290152 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 08:52:25.290862 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 08:52:25.291524 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 08:52:25.292314 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:52:25.292844 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:52:25.293757 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 08:52:25.294268 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:52:25.294626 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:52:25.294971 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:52:25.295373 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:52:25.295856 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:52:25.296401 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 08:52:25.297662 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 08:52:25.297703 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:52:25.297715 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:52:25.298180 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:52:25.298746 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:52:25.301639 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:52:25.302181 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:52:25.303809 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:52:25.304393 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:52:25.304784 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:52:25.305167 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:52:25.305527 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 08:52:25.305875 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:52:25.306912 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 08:52:25.306940 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 08:52:25.307623 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:52:25.307840 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:52:25.308327 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 08:52:25.308600 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 08:52:25.309675 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 08:52:25.310085 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:52:25.310984 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:52:25.311353 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:52:25.311787 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:52:25.312145 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:52:25.312640 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:52:25.312995 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:52:25.313366 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 08:52:25.313728 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:52:25.314177 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:52:25.314493 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:52:25.314800 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:52:25.315012 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:52:25.315329 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:52:25.315587 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:52:25.316000 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:52:25.316016 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:52:25.318078 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 08:52:25.318636 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:52:25.318671 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:52:25.319002 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:52:25.319276 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 08:52:25.319571 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 08:52:25.320165 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:52:25.320642 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:52:25.321604 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:52:25.321640 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:52:25.321931 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 08:52:25.322259 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:52:25.322578 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:52:25.322829 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:52:25.323076 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:52:25.323316 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:52:25.324042 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:52:25.324437 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:52:25.324834 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 08:52:25.325778 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:52:25.325806 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 08:52:25.325811 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:52:25.326088 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:52:25.326372 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:52:25.326616 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 08:52:25.326860 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 08:52:25.328025 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:52:25.328278 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:52:25.328497 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:52:25.328724 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:52:25.329286 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:52:25.329549 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:52:25.330284 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:52:25.330538 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:52:25.330862 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:52:25.331184 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:52:25.332041 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:52:25.332394 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:52:25.335697 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 08:52:25.336164 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 08:52:25.337102 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:52:25.337484 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:52:25.342431 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:52:25.343331 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:52:25.343359 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:52:25.343365 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:52:25.344528 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:52:25.344917 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:52:25.345542 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 08:52:25.345565 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 08:52:24.912532 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 08:52:24.912569 | debian-bookworm | config file = None 2026-06-02 08:52:24.912574 | debian-bookworm | configured module search path = 2026-06-02 08:52:24.912579 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:52:24.912584 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:52:24.912587 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:52:24.912591 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 08:52:24.912595 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:52:24.912599 | debian-bookworm | libyaml = True 2026-06-02 08:52:24.912907 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:24.912913 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:24.912917 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:24.912920 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:24.912924 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:24.912928 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:52:24.912932 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:24.912936 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:24.912940 | debian-bookworm | 2026-06-02 08:52:24.913113 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:24.913122 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:52:24.913129 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:24.913155 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:24.913160 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:24.913164 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:24.913170 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:24.913174 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:24.913177 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:24.913182 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:24.913185 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:24.913189 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:24.913193 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:24.913197 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:24.913201 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:24.913205 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:24.913209 | debian-bookworm | 2026-06-02 08:52:24.913397 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:25.156495 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:52:25.355947 | debian-bookworm | 2026-06-02 08:52:25.356275 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 08:52:25.356556 | debian-bookworm | 2026-06-02 08:52:25.356867 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:52:25.389277 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 08:52:25.389352 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 08:52:25.389368 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:52:25.389564 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:52:25.389955 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 08:52:25.390495 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 08:52:25.390889 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:52:25.391325 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:52:25.391877 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:52:25.392289 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:52:25.392820 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 08:52:25.393304 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:52:25.393792 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:52:25.394297 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:52:25.394815 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 08:52:25.395137 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:52:25.395602 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:52:25.396007 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:52:25.396353 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:52:25.396828 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:52:25.397101 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:52:25.397451 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:52:25.398082 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 08:52:25.398435 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:52:25.398998 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 08:52:25.399023 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:52:25.404555 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:52:25.404595 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:52:25.404950 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:52:25.405333 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:52:25.406177 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 08:52:25.406604 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 08:52:25.406954 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 08:52:25.407336 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 08:52:25.407855 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:52:25.408145 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:52:25.408617 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 08:52:25.409368 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 08:52:25.409389 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:52:25.409395 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:52:25.412237 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:52:25.412269 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:52:25.412276 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 08:52:25.412283 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 08:52:25.412289 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 08:52:25.412295 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:52:25.412404 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 08:52:25.412717 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 08:52:25.414695 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:52:25.414941 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:52:25.415184 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:52:25.415496 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:52:25.415737 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:52:25.415958 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:52:25.417052 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:52:25.417400 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:52:25.417688 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:52:25.417941 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:52:25.418240 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:52:25.418571 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:52:25.418817 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:52:25.419038 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:52:25.419466 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 08:52:25.419735 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 08:52:25.420010 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:52:25.420349 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:52:25.420680 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 08:52:25.420889 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:52:25.421720 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 08:52:25.421946 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 08:52:25.502751 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:52:25.503279 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 08:52:25.520280 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 08:52:25.522981 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 08:52:25.532357 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 08:52:25.532543 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 08:52:25.532656 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:52:25.541338 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 08:52:25.942601 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 08:52:25.942678 | ubuntu-noble | config file = None 2026-06-02 08:52:25.942694 | ubuntu-noble | configured module search path = 2026-06-02 08:52:25.942706 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:52:25.942718 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:52:25.942729 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:52:25.942760 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 08:52:25.942772 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:52:25.942782 | ubuntu-noble | libyaml = True 2026-06-02 08:52:25.945371 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:25.945456 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:25.945469 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:25.945480 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:25.945490 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:25.945500 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:52:25.945514 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:25.945532 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:25.945554 | ubuntu-noble | 2026-06-02 08:52:25.945574 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:25.945592 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:52:25.945609 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:25.945653 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:25.945670 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:25.945688 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:25.945706 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:25.945723 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:25.945741 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:25.945759 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:25.945777 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:25.945788 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:25.945798 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:25.945808 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:25.945818 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:25.945829 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:25.945840 | ubuntu-noble | 2026-06-02 08:52:25.945864 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:26.253111 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:52:26.385309 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 08:52:26.385400 | debian-bookworm | 2026-06-02 08:52:26.385512 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 08:52:26.491853 | ubuntu-noble | 2026-06-02 08:52:26.492447 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 08:52:26.492832 | ubuntu-noble | 2026-06-02 08:52:26.494576 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:52:26.414193 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 08:52:26.414313 | debian-bookworm | 2026-06-02 08:52:26.414437 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 08:52:26.458862 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 08:52:26.459011 | debian-bookworm | 2026-06-02 08:52:26.459156 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 08:52:26.483125 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 08:52:26.483232 | debian-bookworm | 2026-06-02 08:52:26.483359 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 08:52:27.777137 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 08:52:27.777517 | ubuntu-noble | 2026-06-02 08:52:27.777877 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 08:52:27.805972 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 08:52:27.806496 | ubuntu-noble | 2026-06-02 08:52:27.808246 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 08:52:27.885793 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 08:52:27.885883 | ubuntu-noble | 2026-06-02 08:52:27.885928 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 08:52:27.929853 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 08:52:27.929969 | ubuntu-noble | 2026-06-02 08:52:27.929986 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 08:52:30.179594 | debian-bookworm | The following additional packages will be installed: 2026-06-02 08:52:30.179851 | debian-bookworm | libauparse0 2026-06-02 08:52:30.180120 | debian-bookworm | Suggested packages: 2026-06-02 08:52:30.180321 | debian-bookworm | audispd-plugins 2026-06-02 08:52:30.180527 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 08:52:30.180729 | debian-bookworm | auditd libauparse0 2026-06-02 08:52:30.180948 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:52:30.182577 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780390249, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3883 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3883 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 08:52:30.182740 | debian-bookworm | 2026-06-02 08:52:30.182950 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 08:52:32.543595 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 08:52:32.543680 | debian-bookworm | audispd-plugins 2026-06-02 08:52:32.543689 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:52:32.543706 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780390249, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (1019 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (1019 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 08:52:32.543716 | debian-bookworm | 2026-06-02 08:52:32.543795 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 08:52:33.135264 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 08:52:33.135353 | ubuntu-noble | libauparse0t64 2026-06-02 08:52:33.135364 | ubuntu-noble | Suggested packages: 2026-06-02 08:52:33.135372 | ubuntu-noble | audispd-plugins 2026-06-02 08:52:33.135379 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 08:52:33.135387 | ubuntu-noble | auditd libauparse0t64 2026-06-02 08:52:33.135394 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:52:33.138135 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780390252, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (1783 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (1783 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 08:52:33.138419 | ubuntu-noble | 2026-06-02 08:52:33.138651 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 08:52:33.505218 | debian-bookworm | --- before 2026-06-02 08:52:33.505281 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2094bderqg4b/tmpzr8u5x2n/auditd.conf.j2 2026-06-02 08:52:33.505299 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 08:52:33.505308 | debian-bookworm | +# 2026-06-02 08:52:33.505407 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 08:52:33.505499 | debian-bookworm | +# 2026-06-02 08:52:33.505592 | debian-bookworm | + 2026-06-02 08:52:33.505691 | debian-bookworm | +local_events = yes 2026-06-02 08:52:33.505783 | debian-bookworm | +write_logs = yes 2026-06-02 08:52:33.505885 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 08:52:33.506027 | debian-bookworm | +log_group = adm 2026-06-02 08:52:33.506117 | debian-bookworm | +log_format = RAW 2026-06-02 08:52:33.506216 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 08:52:33.506496 | debian-bookworm | +freq = 50 2026-06-02 08:52:33.506594 | debian-bookworm | +max_log_file = 8 2026-06-02 08:52:33.506687 | debian-bookworm | +num_logs = 5 2026-06-02 08:52:33.506782 | debian-bookworm | +priority_boost = 4 2026-06-02 08:52:33.506879 | debian-bookworm | +disp_qos = lossy 2026-06-02 08:52:33.507211 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 08:52:33.507329 | debian-bookworm | +name_format = NONE 2026-06-02 08:52:33.507428 | debian-bookworm | +##name = mydomain 2026-06-02 08:52:33.507529 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 08:52:33.507628 | debian-bookworm | +space_left = 12361 2026-06-02 08:52:33.507724 | debian-bookworm | +space_left_action = email 2026-06-02 08:52:33.507821 | debian-bookworm | +verify_email = yes 2026-06-02 08:52:33.507916 | debian-bookworm | +action_mail_acct = root 2026-06-02 08:52:33.508031 | debian-bookworm | +admin_space_left = 50 2026-06-02 08:52:33.508132 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 08:52:33.508225 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 08:52:33.508321 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 08:52:33.508416 | debian-bookworm | +use_libwrap = yes 2026-06-02 08:52:33.508511 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 08:52:33.508603 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 08:52:33.508697 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 08:52:33.508795 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 08:52:33.508888 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 08:52:33.508992 | debian-bookworm | +enable_krb5 = no 2026-06-02 08:52:33.509087 | debian-bookworm | +krb5_principal = auditd 2026-06-02 08:52:33.509184 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 08:52:33.509279 | debian-bookworm | +distribute_network = no 2026-06-02 08:52:33.509370 | debian-bookworm | 2026-06-02 08:52:33.509484 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780390352.5613103-2464-273592591267149/.source.conf", "state": "file", "uid": 0} 2026-06-02 08:52:33.509564 | debian-bookworm | 2026-06-02 08:52:33.509668 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 08:52:33.859304 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 08:52:33.859357 | debian-bookworm | 2026-06-02 08:52:33.859366 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 08:52:34.579307 | debian-bookworm | --- before 2026-06-02 08:52:34.579377 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2094bderqg4b/tmp4zyxvoof/20-neo23x0.rules.j2 2026-06-02 08:52:34.579529 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 08:52:34.579608 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 08:52:34.579681 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 08:52:34.579788 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 08:52:34.579896 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 08:52:34.580110 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 08:52:34.580223 | debian-bookworm | +# 2026-06-02 08:52:34.580241 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 08:52:34.580257 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 08:52:34.580473 | debian-bookworm | +# 2026-06-02 08:52:34.580494 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 08:52:34.580576 | debian-bookworm | +# 2026-06-02 08:52:34.580729 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 08:52:34.580765 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 08:52:34.580819 | debian-bookworm | +# 2026-06-02 08:52:34.580913 | debian-bookworm | +# Based on rules published here: 2026-06-02 08:52:34.581096 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 08:52:34.581318 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 08:52:34.581465 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 08:52:34.581633 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 08:52:34.581767 | debian-bookworm | +# Linux audit repo 2026-06-02 08:52:34.582016 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 08:52:34.582106 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 08:52:34.582472 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 08:52:34.583616 | debian-bookworm | +# 2026-06-02 08:52:34.583766 | debian-bookworm | +# Further rules 2026-06-02 08:52:34.583931 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 08:52:34.584106 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 08:52:34.584245 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 08:52:34.584388 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 08:52:34.584473 | debian-bookworm | + 2026-06-02 08:52:34.584573 | debian-bookworm | +# Remove any existing rules 2026-06-02 08:52:34.584668 | debian-bookworm | +-D 2026-06-02 08:52:34.584759 | debian-bookworm | + 2026-06-02 08:52:34.584858 | debian-bookworm | +# Buffer Size 2026-06-02 08:52:34.584955 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 08:52:34.585061 | debian-bookworm | +-b 8192 2026-06-02 08:52:34.585156 | debian-bookworm | + 2026-06-02 08:52:34.585252 | debian-bookworm | +# Failure Mode 2026-06-02 08:52:34.585353 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 08:52:34.585449 | debian-bookworm | +-f 1 2026-06-02 08:52:34.585541 | debian-bookworm | + 2026-06-02 08:52:34.585635 | debian-bookworm | +# Ignore errors 2026-06-02 08:52:34.585734 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 08:52:34.585831 | debian-bookworm | +-i 2026-06-02 08:52:34.585924 | debian-bookworm | + 2026-06-02 08:52:34.586047 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 08:52:34.586142 | debian-bookworm | + 2026-06-02 08:52:34.586239 | debian-bookworm | +## Audit the audit logs 2026-06-02 08:52:34.586465 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 08:52:34.586561 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 08:52:34.586661 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 08:52:34.586755 | debian-bookworm | + 2026-06-02 08:52:34.586851 | debian-bookworm | +## Auditd configuration 2026-06-02 08:52:34.590606 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 08:52:34.591231 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 08:52:34.591711 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 08:52:34.592206 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 08:52:34.592558 | debian-bookworm | + 2026-06-02 08:52:34.592890 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 08:52:34.593236 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 08:52:34.593560 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 08:52:34.593886 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 08:52:34.594347 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 08:52:34.594721 | debian-bookworm | + 2026-06-02 08:52:34.595101 | debian-bookworm | +## Access to all audit trails 2026-06-02 08:52:34.595417 | debian-bookworm | + 2026-06-02 08:52:34.595770 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 08:52:34.596132 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 08:52:34.596456 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 08:52:34.596781 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 08:52:34.597165 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 08:52:34.597479 | debian-bookworm | + 2026-06-02 08:52:34.597766 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 08:52:34.598064 | debian-bookworm | + 2026-06-02 08:52:34.598409 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 08:52:34.598694 | debian-bookworm | + 2026-06-02 08:52:34.599037 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 08:52:34.599317 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 08:52:34.599543 | debian-bookworm | + 2026-06-02 08:52:34.599777 | debian-bookworm | +## Ignore current working directory records 2026-06-02 08:52:34.600028 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 08:52:34.600330 | debian-bookworm | + 2026-06-02 08:52:34.600586 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 08:52:34.600828 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 08:52:34.601088 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 08:52:34.601388 | debian-bookworm | + 2026-06-02 08:52:34.601693 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 08:52:34.601942 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 08:52:34.602264 | debian-bookworm | + 2026-06-02 08:52:34.602610 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 08:52:34.602830 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 08:52:34.603059 | debian-bookworm | + 2026-06-02 08:52:34.603296 | debian-bookworm | +## Open VM Tools 2026-06-02 08:52:34.603500 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 08:52:34.603761 | debian-bookworm | + 2026-06-02 08:52:34.603992 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 08:52:34.604200 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 08:52:34.604398 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 08:52:34.604588 | debian-bookworm | + 2026-06-02 08:52:34.604786 | debian-bookworm | +## FileBeat 2026-06-02 08:52:34.605086 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 08:52:34.605298 | debian-bookworm | + 2026-06-02 08:52:34.605499 | debian-bookworm | +## More information on how to filter events 2026-06-02 08:52:34.605707 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 08:52:34.605914 | debian-bookworm | + 2026-06-02 08:52:34.606122 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 08:52:34.606355 | debian-bookworm | + 2026-06-02 08:52:34.606545 | debian-bookworm | +## Kernel parameters 2026-06-02 08:52:34.606729 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 08:52:34.607023 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 08:52:34.607258 | debian-bookworm | + 2026-06-02 08:52:34.607448 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 08:52:34.607622 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 08:52:34.607781 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 08:52:34.607941 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 08:52:34.608133 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 08:52:34.608320 | debian-bookworm | + 2026-06-02 08:52:34.608484 | debian-bookworm | +## Modprobe configuration 2026-06-02 08:52:34.608649 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 08:52:34.608808 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 08:52:34.608960 | debian-bookworm | + 2026-06-02 08:52:34.609169 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 08:52:34.609401 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 08:52:34.609579 | debian-bookworm | + 2026-06-02 08:52:34.609724 | debian-bookworm | +## Special files 2026-06-02 08:52:34.609867 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 08:52:34.610022 | debian-bookworm | + 2026-06-02 08:52:34.610188 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 08:52:34.610390 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 08:52:34.610563 | debian-bookworm | + 2026-06-02 08:52:34.610714 | debian-bookworm | +### NFS mount 2026-06-02 08:52:34.610875 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.611048 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.611188 | debian-bookworm | + 2026-06-02 08:52:34.611334 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 08:52:34.611477 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 08:52:34.611671 | debian-bookworm | + 2026-06-02 08:52:34.611834 | debian-bookworm | +## Time 2026-06-02 08:52:34.612001 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 08:52:34.612149 | debian-bookworm | +### Local time zone 2026-06-02 08:52:34.612299 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 08:52:34.612439 | debian-bookworm | + 2026-06-02 08:52:34.612579 | debian-bookworm | +## Stunnel 2026-06-02 08:52:34.612722 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 08:52:34.612862 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 08:52:34.613039 | debian-bookworm | + 2026-06-02 08:52:34.613229 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 08:52:34.613379 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 08:52:34.613513 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 08:52:34.613646 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 08:52:34.613780 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 08:52:34.613912 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 08:52:34.614066 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 08:52:34.614226 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 08:52:34.614402 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 08:52:34.614539 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 08:52:34.614671 | debian-bookworm | + 2026-06-02 08:52:34.614805 | debian-bookworm | +## User, group, password databases 2026-06-02 08:52:34.614938 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 08:52:34.615087 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 08:52:34.615226 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 08:52:34.615357 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 08:52:34.615489 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 08:52:34.615619 | debian-bookworm | + 2026-06-02 08:52:34.615753 | debian-bookworm | +## Sudoers file changes 2026-06-02 08:52:34.615886 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 08:52:34.616054 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 08:52:34.616190 | debian-bookworm | + 2026-06-02 08:52:34.616311 | debian-bookworm | +## Passwd 2026-06-02 08:52:34.616436 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 08:52:34.616554 | debian-bookworm | + 2026-06-02 08:52:34.616675 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 08:52:34.616798 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 08:52:34.616920 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 08:52:34.617055 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 08:52:34.617180 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 08:52:34.617301 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 08:52:34.617423 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 08:52:34.617545 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 08:52:34.617663 | debian-bookworm | + 2026-06-02 08:52:34.617783 | debian-bookworm | +## Login configuration and information 2026-06-02 08:52:34.617903 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 08:52:34.618055 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 08:52:34.618172 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 08:52:34.618284 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 08:52:34.618426 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 08:52:34.618538 | debian-bookworm | + 2026-06-02 08:52:34.618647 | debian-bookworm | +## Network Environment 2026-06-02 08:52:34.618757 | debian-bookworm | +### Changes to hostname 2026-06-02 08:52:34.618873 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 08:52:34.618994 | debian-bookworm | + 2026-06-02 08:52:34.619105 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 08:52:34.619217 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:52:34.619326 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:52:34.619431 | debian-bookworm | + 2026-06-02 08:52:34.619545 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 08:52:34.619658 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 08:52:34.619764 | debian-bookworm | + 2026-06-02 08:52:34.619872 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 08:52:34.619992 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 08:52:34.620101 | debian-bookworm | + 2026-06-02 08:52:34.620223 | debian-bookworm | +### Changes to other files 2026-06-02 08:52:34.620336 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 08:52:34.620446 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 08:52:34.620560 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 08:52:34.620671 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 08:52:34.620816 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 08:52:34.620933 | debian-bookworm | + 2026-06-02 08:52:34.621106 | debian-bookworm | +### Changes to issue 2026-06-02 08:52:34.621225 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 08:52:34.621339 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 08:52:34.621449 | debian-bookworm | + 2026-06-02 08:52:34.621562 | debian-bookworm | +## System startup scripts 2026-06-02 08:52:34.621673 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 08:52:34.621784 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 08:52:34.621936 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 08:52:34.622114 | debian-bookworm | + 2026-06-02 08:52:34.622436 | debian-bookworm | +## Library search paths 2026-06-02 08:52:34.622562 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 08:52:34.622675 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 08:52:34.622783 | debian-bookworm | + 2026-06-02 08:52:34.622897 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 08:52:34.623051 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 08:52:34.623163 | debian-bookworm | + 2026-06-02 08:52:34.623272 | debian-bookworm | +## Pam configuration 2026-06-02 08:52:34.623381 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 08:52:34.623492 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 08:52:34.623602 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 08:52:34.623713 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 08:52:34.623823 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 08:52:34.623933 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 08:52:34.624057 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 08:52:34.624164 | debian-bookworm | + 2026-06-02 08:52:34.624274 | debian-bookworm | +## Mail configuration 2026-06-02 08:52:34.624384 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 08:52:34.624494 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 08:52:34.624605 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 08:52:34.624709 | debian-bookworm | + 2026-06-02 08:52:34.624817 | debian-bookworm | +## SSH configuration 2026-06-02 08:52:34.624927 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 08:52:34.625051 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 08:52:34.625158 | debian-bookworm | + 2026-06-02 08:52:34.625269 | debian-bookworm | +## root ssh key tampering 2026-06-02 08:52:34.625378 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 08:52:34.625486 | debian-bookworm | + 2026-06-02 08:52:34.625596 | debian-bookworm | +# Systemd 2026-06-02 08:52:34.625707 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 08:52:34.625816 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 08:52:34.625925 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 08:52:34.626064 | debian-bookworm | + 2026-06-02 08:52:34.626198 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 08:52:34.626360 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:34.626483 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:34.626597 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 08:52:34.626705 | debian-bookworm | + 2026-06-02 08:52:34.626816 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:52:34.626928 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:52:34.627055 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:34.627165 | debian-bookworm | + 2026-06-02 08:52:34.627277 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 08:52:34.627389 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 08:52:34.627497 | debian-bookworm | + 2026-06-02 08:52:34.627605 | debian-bookworm | +## Critical elements access failures 2026-06-02 08:52:34.627718 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.627838 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.627950 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628082 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628195 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628308 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628419 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628534 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 08:52:34.628641 | debian-bookworm | + 2026-06-02 08:52:34.628752 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 08:52:34.628862 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 08:52:34.629007 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 08:52:34.629121 | debian-bookworm | + 2026-06-02 08:52:34.629231 | debian-bookworm | +## Power state 2026-06-02 08:52:34.629341 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 08:52:34.629448 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 08:52:34.629555 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 08:52:34.629665 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 08:52:34.629771 | debian-bookworm | + 2026-06-02 08:52:34.629885 | debian-bookworm | +## Session initiation information 2026-06-02 08:52:34.630009 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 08:52:34.630121 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 08:52:34.630234 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 08:52:34.630370 | debian-bookworm | + 2026-06-02 08:52:34.630484 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 08:52:34.630596 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.630715 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.630826 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.630939 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631137 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631270 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631387 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631500 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631611 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631723 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631837 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.631949 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.632103 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:34.632287 | debian-bookworm | + 2026-06-02 08:52:34.632402 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 08:52:34.632509 | debian-bookworm | + 2026-06-02 08:52:34.632619 | debian-bookworm | +## Reconnaissance 2026-06-02 08:52:34.632731 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 08:52:34.632840 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 08:52:34.632950 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 08:52:34.633076 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 08:52:34.633191 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 08:52:34.633302 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 08:52:34.633410 | debian-bookworm | + 2026-06-02 08:52:34.633522 | debian-bookworm | +## Suspicious activity 2026-06-02 08:52:34.633633 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 08:52:34.633742 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 08:52:34.633855 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 08:52:34.633976 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 08:52:34.634088 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 08:52:34.634231 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 08:52:34.634386 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 08:52:34.634515 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 08:52:34.634627 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 08:52:34.634737 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 08:52:34.634847 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 08:52:34.634958 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 08:52:34.635085 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 08:52:34.635197 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 08:52:34.635308 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 08:52:34.635416 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 08:52:34.635525 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 08:52:34.635636 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 08:52:34.635744 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 08:52:34.635851 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:52:34.635961 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:52:34.636112 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 08:52:34.636221 | debian-bookworm | + 2026-06-02 08:52:34.636331 | debian-bookworm | +## sssd 2026-06-02 08:52:34.636449 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.636568 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.636683 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.636797 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.636910 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.637030 | debian-bookworm | + 2026-06-02 08:52:34.637142 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 08:52:34.637248 | debian-bookworm | + 2026-06-02 08:52:34.637358 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 08:52:34.637468 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 08:52:34.637579 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 08:52:34.637691 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 08:52:34.637798 | debian-bookworm | + 2026-06-02 08:52:34.637909 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 08:52:34.638031 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 08:52:34.638139 | debian-bookworm | + 2026-06-02 08:52:34.638247 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:52:34.638393 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:52:34.638503 | debian-bookworm | + 2026-06-02 08:52:34.638614 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 08:52:34.638727 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 08:52:34.638836 | debian-bookworm | + 2026-06-02 08:52:34.638944 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 08:52:34.639070 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 08:52:34.639178 | debian-bookworm | + 2026-06-02 08:52:34.639287 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:52:34.639397 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:52:34.639503 | debian-bookworm | + 2026-06-02 08:52:34.639612 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:52:34.639727 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:52:34.639832 | debian-bookworm | + 2026-06-02 08:52:34.639944 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 08:52:34.640089 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 08:52:34.640241 | debian-bookworm | + 2026-06-02 08:52:34.640375 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 08:52:34.640489 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 08:52:34.640600 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:52:34.640712 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:52:34.640820 | debian-bookworm | + 2026-06-02 08:52:34.640931 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 08:52:34.641064 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 08:52:34.641211 | debian-bookworm | + 2026-06-02 08:52:34.641367 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 08:52:34.641489 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 08:52:34.641601 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 08:52:34.641710 | debian-bookworm | + 2026-06-02 08:52:34.641823 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 08:52:34.641935 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 08:52:34.642085 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 08:52:34.642226 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 08:52:34.642401 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 08:52:34.642532 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 08:52:34.642653 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 08:52:34.642764 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 08:52:34.642874 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 08:52:34.643000 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 08:52:34.643111 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 08:52:34.643219 | debian-bookworm | + 2026-06-02 08:52:34.643327 | debian-bookworm | +### kde4 2026-06-02 08:52:34.643452 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.643613 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:34.643729 | debian-bookworm | + 2026-06-02 08:52:34.643842 | debian-bookworm | +## dbus-send invocation 2026-06-02 08:52:34.643955 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 08:52:34.644105 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 08:52:34.644223 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 08:52:34.644330 | debian-bookworm | + 2026-06-02 08:52:34.644438 | debian-bookworm | +## pkexec invocation 2026-06-02 08:52:34.644551 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 08:52:34.644661 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 08:52:34.644767 | debian-bookworm | + 2026-06-02 08:52:34.644877 | debian-bookworm | +## Suspicious shells 2026-06-02 08:52:34.645001 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 08:52:34.645114 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 08:52:34.645222 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 08:52:34.645330 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 08:52:34.645438 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 08:52:34.645549 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 08:52:34.645772 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 08:52:34.645889 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 08:52:34.646014 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 08:52:34.646124 | debian-bookworm | + 2026-06-02 08:52:34.646267 | debian-bookworm | +# Web Server Actvity 2026-06-02 08:52:34.646418 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 08:52:34.646534 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 08:52:34.646641 | debian-bookworm | + 2026-06-02 08:52:34.646750 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 08:52:34.646858 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 08:52:34.646998 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 08:52:34.647115 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 08:52:34.647224 | debian-bookworm | + 2026-06-02 08:52:34.647332 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 08:52:34.647442 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 08:52:34.647553 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 08:52:34.647661 | debian-bookworm | + 2026-06-02 08:52:34.647778 | debian-bookworm | +## Shell/profile configurations 2026-06-02 08:52:34.647887 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 08:52:34.648008 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 08:52:34.648120 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 08:52:34.648230 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 08:52:34.648342 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 08:52:34.648454 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 08:52:34.648566 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 08:52:34.648677 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 08:52:34.648795 | debian-bookworm | + 2026-06-02 08:52:34.648906 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 08:52:34.649032 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 08:52:34.649142 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 08:52:34.649253 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 08:52:34.649360 | debian-bookworm | + 2026-06-02 08:52:34.649469 | debian-bookworm | +## Injection 2026-06-02 08:52:34.649582 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 08:52:34.649692 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 08:52:34.649802 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 08:52:34.649913 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 08:52:34.650037 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 08:52:34.650149 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 08:52:34.650257 | debian-bookworm | + 2026-06-02 08:52:34.650400 | debian-bookworm | +## Anonymous File Creation 2026-06-02 08:52:34.650514 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 08:52:34.650662 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 08:52:34.650811 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 08:52:34.650929 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 08:52:34.651085 | debian-bookworm | + 2026-06-02 08:52:34.651209 | debian-bookworm | +## Privilege Abuse 2026-06-02 08:52:34.651355 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 08:52:34.651482 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 08:52:34.651591 | debian-bookworm | + 2026-06-02 08:52:34.651714 | debian-bookworm | +# Socket Creations 2026-06-02 08:52:34.651857 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 08:52:34.651985 | debian-bookworm | + 2026-06-02 08:52:34.652101 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:52:34.652212 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:52:34.652321 | debian-bookworm | + 2026-06-02 08:52:34.652433 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:52:34.652543 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:52:34.652649 | debian-bookworm | + 2026-06-02 08:52:34.652761 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 08:52:34.652867 | debian-bookworm | + 2026-06-02 08:52:34.652994 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 08:52:34.653109 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 08:52:34.653221 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 08:52:34.653328 | debian-bookworm | + 2026-06-02 08:52:34.653439 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 08:52:34.653548 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 08:52:34.653655 | debian-bookworm | + 2026-06-02 08:52:34.653765 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 08:52:34.653875 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 08:52:34.653998 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 08:52:34.654109 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 08:52:34.654262 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 08:52:34.654408 | debian-bookworm | + 2026-06-02 08:52:34.654523 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 08:52:34.654634 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 08:52:34.654744 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 08:52:34.654892 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 08:52:34.655064 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 08:52:34.655180 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 08:52:34.655291 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 08:52:34.655401 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 08:52:34.655511 | debian-bookworm | + 2026-06-02 08:52:34.655623 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 08:52:34.655736 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:52:34.655850 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:52:34.655991 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:52:34.656105 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:52:34.656215 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:52:34.656326 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:52:34.656434 | debian-bookworm | + 2026-06-02 08:52:34.656544 | debian-bookworm | +# npm 2026-06-02 08:52:34.656658 | debian-bookworm | +## T1072 third party software 2026-06-02 08:52:34.656768 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 08:52:34.656879 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 08:52:34.657013 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 08:52:34.657124 | debian-bookworm | + 2026-06-02 08:52:34.657235 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 08:52:34.657347 | debian-bookworm | +## T1072 third party software 2026-06-02 08:52:34.657458 | debian-bookworm | +## https://www.cpan.org 2026-06-02 08:52:34.657570 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 08:52:34.657678 | debian-bookworm | + 2026-06-02 08:52:34.657787 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 08:52:34.657897 | debian-bookworm | +## T1072 third party software 2026-06-02 08:52:34.658038 | debian-bookworm | +## https://rubygems.org 2026-06-02 08:52:34.658164 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 08:52:34.658318 | debian-bookworm | + 2026-06-02 08:52:34.658436 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 08:52:34.658546 | debian-bookworm | +## T1072 third party software 2026-06-02 08:52:34.658655 | debian-bookworm | +## https://luarocks.org 2026-06-02 08:52:34.658771 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 08:52:34.658878 | debian-bookworm | + 2026-06-02 08:52:34.659003 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 08:52:34.659117 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 08:52:34.659228 | debian-bookworm | +## T1072 third party software 2026-06-02 08:52:34.659339 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 08:52:34.659450 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 08:52:34.659555 | debian-bookworm | + 2026-06-02 08:52:34.659665 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 08:52:34.659771 | debian-bookworm | + 2026-06-02 08:52:34.659880 | debian-bookworm | +## GDS specific secrets 2026-06-02 08:52:34.660053 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 08:52:34.660182 | debian-bookworm | + 2026-06-02 08:52:34.660294 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 08:52:34.660409 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 08:52:34.660523 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 08:52:34.660630 | debian-bookworm | + 2026-06-02 08:52:34.660742 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 08:52:34.660853 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 08:52:34.660959 | debian-bookworm | + 2026-06-02 08:52:34.661105 | debian-bookworm | +## Salt 2026-06-02 08:52:34.661264 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 08:52:34.661418 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 08:52:34.661535 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 08:52:34.661647 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 08:52:34.661753 | debian-bookworm | + 2026-06-02 08:52:34.661863 | debian-bookworm | +## Otter 2026-06-02 08:52:34.662013 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 08:52:34.662135 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 08:52:34.662271 | debian-bookworm | + 2026-06-02 08:52:34.662407 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 08:52:34.662520 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 08:52:34.662633 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 08:52:34.662745 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 08:52:34.662855 | debian-bookworm | +### macOS 2026-06-02 08:52:34.662984 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 08:52:34.663101 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 08:52:34.663221 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 08:52:34.663328 | debian-bookworm | + 2026-06-02 08:52:34.663440 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 08:52:34.663551 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 08:52:34.663659 | debian-bookworm | +### macOS 2026-06-02 08:52:34.663769 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 08:52:34.663890 | debian-bookworm | + 2026-06-02 08:52:34.664021 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 08:52:34.664134 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 08:52:34.664243 | debian-bookworm | +### macOS 2026-06-02 08:52:34.664352 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 08:52:34.664459 | debian-bookworm | + 2026-06-02 08:52:34.664569 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 08:52:34.664676 | debian-bookworm | + 2026-06-02 08:52:34.664786 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 08:52:34.664895 | debian-bookworm | +### macOS 2026-06-02 08:52:34.665017 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 08:52:34.665124 | debian-bookworm | + 2026-06-02 08:52:34.665232 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 08:52:34.665339 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 08:52:34.665445 | debian-bookworm | +### macOS 2026-06-02 08:52:34.665555 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 08:52:34.665662 | debian-bookworm | + 2026-06-02 08:52:34.665772 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 08:52:34.665883 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 08:52:34.666024 | debian-bookworm | +### macOS 2026-06-02 08:52:34.666141 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 08:52:34.666249 | debian-bookworm | + 2026-06-02 08:52:34.666393 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 08:52:34.666505 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 08:52:34.666614 | debian-bookworm | +### macOS 2026-06-02 08:52:34.666725 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 08:52:34.666831 | debian-bookworm | + 2026-06-02 08:52:34.666940 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 08:52:34.667069 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 08:52:34.667178 | debian-bookworm | +### macOS 2026-06-02 08:52:34.667289 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 08:52:34.667395 | debian-bookworm | + 2026-06-02 08:52:34.667506 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 08:52:34.667615 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 08:52:34.667721 | debian-bookworm | +### macOS 2026-06-02 08:52:34.667838 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 08:52:34.667942 | debian-bookworm | + 2026-06-02 08:52:34.668088 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 08:52:34.668199 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 08:52:34.668308 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 08:52:34.668417 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 08:52:34.668526 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 08:52:34.668633 | debian-bookworm | +### macOS 2026-06-02 08:52:34.668743 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 08:52:34.668849 | debian-bookworm | + 2026-06-02 08:52:34.668957 | debian-bookworm | +## Docker 2026-06-02 08:52:34.669082 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 08:52:34.669195 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 08:52:34.669347 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 08:52:34.669466 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 08:52:34.669574 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 08:52:34.669683 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 08:52:34.669792 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 08:52:34.669932 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 08:52:34.670087 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 08:52:34.670225 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 08:52:34.670387 | debian-bookworm | + 2026-06-02 08:52:34.670559 | debian-bookworm | +## Virtualization stuff 2026-06-02 08:52:34.670701 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 08:52:34.670815 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 08:52:34.670925 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 08:52:34.671056 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 08:52:34.671201 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 08:52:34.671356 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 08:52:34.671475 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 08:52:34.671582 | debian-bookworm | + 2026-06-02 08:52:34.671781 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 08:52:34.671942 | debian-bookworm | + 2026-06-02 08:52:34.672087 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 08:52:34.672221 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 08:52:34.672334 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 08:52:34.672470 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 08:52:34.672616 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 08:52:34.672732 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 08:52:34.672845 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 08:52:34.673021 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 08:52:34.673154 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 08:52:34.673266 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 08:52:34.673377 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 08:52:34.673490 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 08:52:34.673604 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 08:52:34.673716 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 08:52:34.673827 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 08:52:34.673937 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 08:52:34.674083 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 08:52:34.674238 | debian-bookworm | + 2026-06-02 08:52:34.674386 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 08:52:34.674497 | debian-bookworm | + 2026-06-02 08:52:34.674608 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 08:52:34.674720 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 08:52:34.674831 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 08:52:34.674940 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 08:52:34.675104 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 08:52:34.675220 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 08:52:34.675329 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 08:52:34.675446 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 08:52:34.675555 | debian-bookworm | + 2026-06-02 08:52:34.675665 | debian-bookworm | +### qemu on macOS 2026-06-02 08:52:34.675772 | debian-bookworm | + 2026-06-02 08:52:34.675884 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 08:52:34.676011 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 08:52:34.676126 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 08:52:34.676235 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 08:52:34.676348 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 08:52:34.676456 | debian-bookworm | + 2026-06-02 08:52:34.676565 | debian-bookworm | +## Kubelet 2026-06-02 08:52:34.676674 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 08:52:34.676794 | debian-bookworm | + 2026-06-02 08:52:34.676947 | debian-bookworm | +# ipc system call 2026-06-02 08:52:34.677093 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 08:52:34.677203 | debian-bookworm | + 2026-06-02 08:52:34.677322 | debian-bookworm | +## msgctl 2026-06-02 08:52:34.677437 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 08:52:34.677545 | debian-bookworm | +## msgget 2026-06-02 08:52:34.677656 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 08:52:34.677768 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:34.677879 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 08:52:34.678033 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 08:52:34.678149 | debian-bookworm | + 2026-06-02 08:52:34.678325 | debian-bookworm | +## semctl 2026-06-02 08:52:34.678453 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 08:52:34.678563 | debian-bookworm | +## semget 2026-06-02 08:52:34.678675 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 08:52:34.678781 | debian-bookworm | +## semop 2026-06-02 08:52:34.678891 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 08:52:34.679026 | debian-bookworm | +## semtimedop 2026-06-02 08:52:34.679141 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 08:52:34.679251 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:34.679375 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 08:52:34.679487 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 08:52:34.679598 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 08:52:34.679710 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 08:52:34.679818 | debian-bookworm | + 2026-06-02 08:52:34.679942 | debian-bookworm | +## shmctl 2026-06-02 08:52:34.680105 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 08:52:34.680217 | debian-bookworm | +## shmget 2026-06-02 08:52:34.680328 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 08:52:34.680438 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:34.680547 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 08:52:34.680659 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 08:52:34.680767 | debian-bookworm | + 2026-06-02 08:52:34.680878 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 08:52:34.681049 | debian-bookworm | + 2026-06-02 08:52:34.681180 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 08:52:34.681290 | debian-bookworm | + 2026-06-02 08:52:34.681399 | debian-bookworm | +## Common Shells 2026-06-02 08:52:34.681508 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 08:52:34.681642 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 08:52:34.681776 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 08:52:34.681889 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 08:52:34.682024 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 08:52:34.682140 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 08:52:34.682270 | debian-bookworm | + 2026-06-02 08:52:34.682416 | debian-bookworm | +## Root command executions 2026-06-02 08:52:34.682533 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 08:52:34.682642 | debian-bookworm | + 2026-06-02 08:52:34.682755 | debian-bookworm | +## File Deletion Events by User 2026-06-02 08:52:34.682869 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 08:52:34.682996 | debian-bookworm | + 2026-06-02 08:52:34.683112 | debian-bookworm | +## File Access 2026-06-02 08:52:34.683223 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 08:52:34.683339 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:52:34.683456 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:52:34.683564 | debian-bookworm | + 2026-06-02 08:52:34.683677 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 08:52:34.683792 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 08:52:34.683903 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 08:52:34.684062 | debian-bookworm | + 2026-06-02 08:52:34.684204 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 08:52:34.684331 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 08:52:34.684449 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 08:52:34.684556 | debian-bookworm | + 2026-06-02 08:52:34.684667 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 08:52:34.684780 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 08:52:34.684894 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 08:52:34.685026 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 08:52:34.685137 | debian-bookworm | +### bit API. 2026-06-02 08:52:34.685247 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 08:52:34.685353 | debian-bookworm | + 2026-06-02 08:52:34.685466 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 08:52:34.685588 | debian-bookworm | + 2026-06-02 08:52:34.685699 | debian-bookworm | +##-e 2 2026-06-02 08:52:34.685805 | debian-bookworm | 2026-06-02 08:52:34.686111 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780390353.8832312-2542-15029619706035/.source.rules", "state": "file", "uid": 0} 2026-06-02 08:52:34.686270 | debian-bookworm | 2026-06-02 08:52:34.686419 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 08:52:35.428032 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ActiveEnterTimestampMonotonic": "461682119", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:29 UTC", "AssertTimestampMonotonic": "461617675", "Before": "sysinit.target shutdown.target systemd-update-utmp.service ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "49475000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ConditionTimestampMonotonic": "461617644", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2314", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ExecMainStartTimestampMonotonic": "461653254", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2313 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2313 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2317 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2317 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:29 UTC", "InactiveExitTimestampMonotonic": "461632451", "InvocationID": "f58b35061ad541b98d7a5019434f1d9a", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2314", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "708608", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:52:29 UTC", "StateChangeTimestampMonotonic": "461682119", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:35.434544 | debian-bookworm | 2026-06-02 08:52:35.434629 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 08:52:35.821877 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008887", "end": "2026-06-02 08:52:35.768568", "msg": "", "rc": 0, "start": "2026-06-02 08:52:35.759681", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 08:52:35.821936 | debian-bookworm | 2026-06-02 08:52:35.821943 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 08:52:36.172695 | debian-bookworm | --- before 2026-06-02 08:52:36.172758 | debian-bookworm | +++ after 2026-06-02 08:52:36.172766 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 08:52:36.172774 | debian-bookworm | { 2026-06-02 08:52:36.172782 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 08:52:36.172790 | debian-bookworm | - "state": "file" 2026-06-02 08:52:36.172798 | debian-bookworm | + "state": "absent" 2026-06-02 08:52:36.172804 | debian-bookworm | } 2026-06-02 08:52:36.172811 | debian-bookworm | 2026-06-02 08:52:36.172819 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 08:52:36.172829 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 08:52:36.172846 | debian-bookworm | 2026-06-02 08:52:36.172854 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:52:36.808004 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 08:52:36.808065 | ubuntu-noble | audispd-plugins 2026-06-02 08:52:36.808075 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:52:36.808086 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780390252, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (716 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (716 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 08:52:36.808112 | ubuntu-noble | 2026-06-02 08:52:36.808120 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 08:52:36.872676 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ActiveEnterTimestampMonotonic": "461682119", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:29 UTC", "AssertTimestampMonotonic": "461617675", "Before": "sysinit.target shutdown.target systemd-update-utmp.service ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "50842000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ConditionTimestampMonotonic": "461617644", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2314", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:29 UTC", "ExecMainStartTimestampMonotonic": "461653254", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2313 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2313 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2317 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:29 UTC] ; stop_time=[Tue 2026-06-02 08:52:29 UTC] ; pid=2317 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:29 UTC", "InactiveExitTimestampMonotonic": "461632451", "InvocationID": "f58b35061ad541b98d7a5019434f1d9a", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2314", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:52:29 UTC", "StateChangeTimestampMonotonic": "461682119", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:36.881038 | debian-bookworm | 2026-06-02 08:52:36.881073 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 08:52:37.329745 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.110094", "end": "2026-06-02 08:52:37.278494", "msg": "", "rc": 0, "start": "2026-06-02 08:52:37.168400", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2704\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 0\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2704\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 3\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2704", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 0", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2704", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 3", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 08:52:37.329802 | debian-bookworm | 2026-06-02 08:52:37.329809 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:52:38.106232 | ubuntu-noble | --- before 2026-06-02 08:52:38.106445 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1985oad12esr/tmpo9ifpwly/auditd.conf.j2 2026-06-02 08:52:38.106579 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 08:52:38.106696 | ubuntu-noble | +# 2026-06-02 08:52:38.106844 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 08:52:38.106960 | ubuntu-noble | +# 2026-06-02 08:52:38.107075 | ubuntu-noble | + 2026-06-02 08:52:38.107192 | ubuntu-noble | +local_events = yes 2026-06-02 08:52:38.107334 | ubuntu-noble | +write_logs = yes 2026-06-02 08:52:38.107452 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 08:52:38.107568 | ubuntu-noble | +log_group = adm 2026-06-02 08:52:38.107681 | ubuntu-noble | +log_format = RAW 2026-06-02 08:52:38.107814 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 08:52:38.107929 | ubuntu-noble | +freq = 50 2026-06-02 08:52:38.108041 | ubuntu-noble | +max_log_file = 8 2026-06-02 08:52:38.108153 | ubuntu-noble | +num_logs = 5 2026-06-02 08:52:38.108293 | ubuntu-noble | +priority_boost = 4 2026-06-02 08:52:38.108413 | ubuntu-noble | +disp_qos = lossy 2026-06-02 08:52:38.108529 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 08:52:38.108644 | ubuntu-noble | +name_format = NONE 2026-06-02 08:52:38.108820 | ubuntu-noble | +##name = mydomain 2026-06-02 08:52:38.108972 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 08:52:38.109087 | ubuntu-noble | +space_left = 12361 2026-06-02 08:52:38.109223 | ubuntu-noble | +space_left_action = email 2026-06-02 08:52:38.109347 | ubuntu-noble | +verify_email = yes 2026-06-02 08:52:38.109498 | ubuntu-noble | +action_mail_acct = root 2026-06-02 08:52:38.109628 | ubuntu-noble | +admin_space_left = 50 2026-06-02 08:52:38.109791 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 08:52:38.109913 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 08:52:38.110028 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 08:52:38.110144 | ubuntu-noble | +use_libwrap = yes 2026-06-02 08:52:38.110287 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 08:52:38.110410 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 08:52:38.110522 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 08:52:38.110638 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 08:52:38.110767 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 08:52:38.110890 | ubuntu-noble | +enable_krb5 = no 2026-06-02 08:52:38.111041 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 08:52:38.111162 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 08:52:38.111299 | ubuntu-noble | +distribute_network = no 2026-06-02 08:52:38.111413 | ubuntu-noble | 2026-06-02 08:52:38.111562 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780390356.8243282-2384-280171225305145/.source.conf", "state": "file", "uid": 0} 2026-06-02 08:52:38.111946 | ubuntu-noble | 2026-06-02 08:52:38.112125 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 08:52:38.154353 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:36 UTC", "ActiveEnterTimestampMonotonic": "469005549", "ActiveExitTimestamp": "Tue 2026-06-02 08:52:36 UTC", "ActiveExitTimestampMonotonic": "468800965", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:36 UTC", "AssertTimestampMonotonic": "468842650", "Before": "sysinit.target shutdown.target systemd-update-utmp.service ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "174536000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:36 UTC", "ConditionTimestampMonotonic": "468842591", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2704", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:36 UTC", "ExecMainStartTimestampMonotonic": "468883076", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:36 UTC] ; stop_time=[Tue 2026-06-02 08:52:36 UTC] ; pid=2702 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:36 UTC] ; stop_time=[Tue 2026-06-02 08:52:36 UTC] ; pid=2702 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:36 UTC] ; stop_time=[Tue 2026-06-02 08:52:36 UTC] ; pid=2707 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:36 UTC] ; stop_time=[Tue 2026-06-02 08:52:36 UTC] ; pid=2707 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 08:52:36 UTC", "InactiveEnterTimestampMonotonic": "468841632", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:36 UTC", "InactiveExitTimestampMonotonic": "468862608", "InvocationID": "65ec2f72f0fc4f4d976ce241785e23a8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2704", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2076672", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:52:36 UTC", "StateChangeTimestampMonotonic": "469005549", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:38.155620 | debian-bookworm | 2026-06-02 08:52:38.155645 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 08:52:38.155652 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:52:38.155656 | debian-bookworm | 2026-06-02 08:52:38.253049 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 08:52:38.253561 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:52:38.421324 | debian-bookworm | ok: Runtime: 0:00:16.014744 2026-06-02 08:52:38.596713 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 08:52:38.598553 | ubuntu-noble | 2026-06-02 08:52:38.598582 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 08:52:39.574288 | ubuntu-noble | --- before 2026-06-02 08:52:39.574334 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1985oad12esr/tmp007ydueg/20-neo23x0.rules.j2 2026-06-02 08:52:39.574340 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 08:52:39.574345 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 08:52:39.574349 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 08:52:39.575490 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 08:52:39.575722 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 08:52:39.575898 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 08:52:39.576025 | ubuntu-noble | +# 2026-06-02 08:52:39.576151 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 08:52:39.576307 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 08:52:39.577224 | ubuntu-noble | +# 2026-06-02 08:52:39.577239 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 08:52:39.577244 | ubuntu-noble | +# 2026-06-02 08:52:39.577248 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 08:52:39.577251 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 08:52:39.577255 | ubuntu-noble | +# 2026-06-02 08:52:39.577258 | ubuntu-noble | +# Based on rules published here: 2026-06-02 08:52:39.577262 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 08:52:39.577503 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 08:52:39.577704 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 08:52:39.577916 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 08:52:39.578087 | ubuntu-noble | +# Linux audit repo 2026-06-02 08:52:39.578293 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 08:52:39.578471 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 08:52:39.578647 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 08:52:39.578765 | ubuntu-noble | +# 2026-06-02 08:52:39.578900 | ubuntu-noble | +# Further rules 2026-06-02 08:52:39.579064 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 08:52:39.579280 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 08:52:39.579451 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 08:52:39.579633 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 08:52:39.579752 | ubuntu-noble | + 2026-06-02 08:52:39.579911 | ubuntu-noble | +# Remove any existing rules 2026-06-02 08:52:39.580027 | ubuntu-noble | +-D 2026-06-02 08:52:39.580136 | ubuntu-noble | + 2026-06-02 08:52:39.580268 | ubuntu-noble | +# Buffer Size 2026-06-02 08:52:39.580391 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 08:52:39.580504 | ubuntu-noble | +-b 8192 2026-06-02 08:52:39.580613 | ubuntu-noble | + 2026-06-02 08:52:39.580728 | ubuntu-noble | +# Failure Mode 2026-06-02 08:52:39.580862 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 08:52:39.580973 | ubuntu-noble | +-f 1 2026-06-02 08:52:39.581081 | ubuntu-noble | + 2026-06-02 08:52:39.581192 | ubuntu-noble | +# Ignore errors 2026-06-02 08:52:39.581334 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 08:52:39.581445 | ubuntu-noble | +-i 2026-06-02 08:52:39.581554 | ubuntu-noble | + 2026-06-02 08:52:39.581669 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 08:52:39.581790 | ubuntu-noble | + 2026-06-02 08:52:39.581905 | ubuntu-noble | +## Audit the audit logs 2026-06-02 08:52:39.582022 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 08:52:39.582136 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 08:52:39.582275 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 08:52:39.582392 | ubuntu-noble | + 2026-06-02 08:52:39.582506 | ubuntu-noble | +## Auditd configuration 2026-06-02 08:52:39.582623 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 08:52:39.582738 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 08:52:39.582885 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 08:52:39.583001 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 08:52:39.583110 | ubuntu-noble | + 2026-06-02 08:52:39.583241 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 08:52:39.583361 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 08:52:39.583473 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 08:52:39.583617 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 08:52:39.584295 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 08:52:39.584314 | ubuntu-noble | + 2026-06-02 08:52:39.584319 | ubuntu-noble | +## Access to all audit trails 2026-06-02 08:52:39.584322 | ubuntu-noble | + 2026-06-02 08:52:39.584326 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 08:52:39.584430 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 08:52:39.584580 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 08:52:39.584708 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 08:52:39.584850 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 08:52:39.584964 | ubuntu-noble | + 2026-06-02 08:52:39.585079 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 08:52:39.585187 | ubuntu-noble | + 2026-06-02 08:52:39.585327 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 08:52:39.585443 | ubuntu-noble | + 2026-06-02 08:52:39.585560 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 08:52:39.585676 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 08:52:39.585825 | ubuntu-noble | + 2026-06-02 08:52:39.585945 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 08:52:39.586073 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 08:52:39.586183 | ubuntu-noble | + 2026-06-02 08:52:39.586332 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 08:52:39.586455 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 08:52:39.586570 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 08:52:39.586681 | ubuntu-noble | + 2026-06-02 08:52:39.586831 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 08:52:39.586961 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 08:52:39.587070 | ubuntu-noble | + 2026-06-02 08:52:39.587246 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 08:52:39.587402 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 08:52:39.587514 | ubuntu-noble | + 2026-06-02 08:52:39.587630 | ubuntu-noble | +## Open VM Tools 2026-06-02 08:52:39.588235 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 08:52:39.588250 | ubuntu-noble | + 2026-06-02 08:52:39.588254 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 08:52:39.588258 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 08:52:39.588297 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 08:52:39.588407 | ubuntu-noble | + 2026-06-02 08:52:39.588521 | ubuntu-noble | +## FileBeat 2026-06-02 08:52:39.588642 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 08:52:39.588751 | ubuntu-noble | + 2026-06-02 08:52:39.588881 | ubuntu-noble | +## More information on how to filter events 2026-06-02 08:52:39.588999 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 08:52:39.589106 | ubuntu-noble | + 2026-06-02 08:52:39.589245 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 08:52:39.589360 | ubuntu-noble | + 2026-06-02 08:52:39.589473 | ubuntu-noble | +## Kernel parameters 2026-06-02 08:52:39.589587 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 08:52:39.589699 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 08:52:39.589816 | ubuntu-noble | + 2026-06-02 08:52:39.589929 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 08:52:39.590047 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 08:52:39.590164 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 08:52:39.590297 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 08:52:39.590423 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 08:52:39.590532 | ubuntu-noble | + 2026-06-02 08:52:39.590646 | ubuntu-noble | +## Modprobe configuration 2026-06-02 08:52:39.590761 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 08:52:39.590905 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 08:52:39.591015 | ubuntu-noble | + 2026-06-02 08:52:39.591133 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 08:52:39.591267 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 08:52:39.591395 | ubuntu-noble | + 2026-06-02 08:52:39.591511 | ubuntu-noble | +## Special files 2026-06-02 08:52:39.591629 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 08:52:39.591737 | ubuntu-noble | + 2026-06-02 08:52:39.591869 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 08:52:39.594218 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 08:52:39.594237 | ubuntu-noble | + 2026-06-02 08:52:39.594241 | ubuntu-noble | +### NFS mount 2026-06-02 08:52:39.594245 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.594261 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.594264 | ubuntu-noble | + 2026-06-02 08:52:39.594268 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 08:52:39.594274 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 08:52:39.594278 | ubuntu-noble | + 2026-06-02 08:52:39.594282 | ubuntu-noble | +## Time 2026-06-02 08:52:39.594285 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 08:52:39.594289 | ubuntu-noble | +### Local time zone 2026-06-02 08:52:39.594293 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 08:52:39.594296 | ubuntu-noble | + 2026-06-02 08:52:39.594300 | ubuntu-noble | +## Stunnel 2026-06-02 08:52:39.594303 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 08:52:39.594307 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 08:52:39.594310 | ubuntu-noble | + 2026-06-02 08:52:39.594314 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 08:52:39.594317 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 08:52:39.594320 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 08:52:39.594324 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 08:52:39.594327 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 08:52:39.594358 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 08:52:39.594477 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 08:52:39.594594 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 08:52:39.594707 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 08:52:39.594834 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 08:52:39.594944 | ubuntu-noble | + 2026-06-02 08:52:39.595057 | ubuntu-noble | +## User, group, password databases 2026-06-02 08:52:39.595171 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 08:52:39.595297 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 08:52:39.595418 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 08:52:39.595531 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 08:52:39.595644 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 08:52:39.595753 | ubuntu-noble | + 2026-06-02 08:52:39.595901 | ubuntu-noble | +## Sudoers file changes 2026-06-02 08:52:39.596018 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 08:52:39.596132 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 08:52:39.596252 | ubuntu-noble | + 2026-06-02 08:52:39.596369 | ubuntu-noble | +## Passwd 2026-06-02 08:52:39.596487 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 08:52:39.596597 | ubuntu-noble | + 2026-06-02 08:52:39.596710 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 08:52:39.596841 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 08:52:39.596958 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 08:52:39.597074 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 08:52:39.597189 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 08:52:39.597320 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 08:52:39.597440 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 08:52:39.597555 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 08:52:39.597663 | ubuntu-noble | + 2026-06-02 08:52:39.597805 | ubuntu-noble | +## Login configuration and information 2026-06-02 08:52:39.597928 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 08:52:39.598043 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 08:52:39.598177 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 08:52:39.598306 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 08:52:39.598421 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 08:52:39.598530 | ubuntu-noble | + 2026-06-02 08:52:39.598644 | ubuntu-noble | +## Network Environment 2026-06-02 08:52:39.598757 | ubuntu-noble | +### Changes to hostname 2026-06-02 08:52:39.598904 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 08:52:39.599011 | ubuntu-noble | + 2026-06-02 08:52:39.599121 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 08:52:39.599257 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:52:39.599381 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:52:39.599489 | ubuntu-noble | + 2026-06-02 08:52:39.599604 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 08:52:39.599736 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 08:52:39.599856 | ubuntu-noble | + 2026-06-02 08:52:39.599971 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 08:52:39.600089 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 08:52:39.600212 | ubuntu-noble | + 2026-06-02 08:52:39.600337 | ubuntu-noble | +### Changes to other files 2026-06-02 08:52:39.600453 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 08:52:39.600570 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 08:52:39.600685 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 08:52:39.600826 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 08:52:39.600957 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 08:52:39.601066 | ubuntu-noble | + 2026-06-02 08:52:39.601180 | ubuntu-noble | +### Changes to issue 2026-06-02 08:52:39.601308 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 08:52:39.601430 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 08:52:39.601538 | ubuntu-noble | + 2026-06-02 08:52:39.601651 | ubuntu-noble | +## System startup scripts 2026-06-02 08:52:39.601762 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 08:52:39.601887 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 08:52:39.601999 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 08:52:39.602106 | ubuntu-noble | + 2026-06-02 08:52:39.602242 | ubuntu-noble | +## Library search paths 2026-06-02 08:52:39.602363 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 08:52:39.602477 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 08:52:39.602586 | ubuntu-noble | + 2026-06-02 08:52:39.602703 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 08:52:39.602849 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 08:52:39.602967 | ubuntu-noble | + 2026-06-02 08:52:39.603081 | ubuntu-noble | +## Pam configuration 2026-06-02 08:52:39.603191 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 08:52:39.603329 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 08:52:39.603446 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 08:52:39.603561 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 08:52:39.603675 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 08:52:39.603803 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 08:52:39.603920 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 08:52:39.604028 | ubuntu-noble | + 2026-06-02 08:52:39.604143 | ubuntu-noble | +## Mail configuration 2026-06-02 08:52:39.604284 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 08:52:39.604405 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 08:52:39.604518 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 08:52:39.604628 | ubuntu-noble | + 2026-06-02 08:52:39.605555 | ubuntu-noble | +## SSH configuration 2026-06-02 08:52:39.605727 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 08:52:39.605861 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 08:52:39.605962 | ubuntu-noble | + 2026-06-02 08:52:39.606064 | ubuntu-noble | +## root ssh key tampering 2026-06-02 08:52:39.606233 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 08:52:39.606331 | ubuntu-noble | + 2026-06-02 08:52:39.606429 | ubuntu-noble | +# Systemd 2026-06-02 08:52:39.606530 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 08:52:39.606628 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 08:52:39.606760 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 08:52:39.607035 | ubuntu-noble | + 2026-06-02 08:52:39.607045 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 08:52:39.608586 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:39.608609 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:39.608614 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 08:52:39.608627 | ubuntu-noble | + 2026-06-02 08:52:39.608631 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:52:39.608634 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:52:39.608641 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:52:39.609366 | ubuntu-noble | + 2026-06-02 08:52:39.609387 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 08:52:39.609391 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 08:52:39.609394 | ubuntu-noble | + 2026-06-02 08:52:39.609398 | ubuntu-noble | +## Critical elements access failures 2026-06-02 08:52:39.609402 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609409 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609472 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609576 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609706 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609837 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.609925 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.610031 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 08:52:39.610121 | ubuntu-noble | + 2026-06-02 08:52:39.610405 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 08:52:39.610528 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 08:52:39.610629 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 08:52:39.610725 | ubuntu-noble | + 2026-06-02 08:52:39.610838 | ubuntu-noble | +## Power state 2026-06-02 08:52:39.610946 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 08:52:39.611038 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 08:52:39.611138 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 08:52:39.611263 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 08:52:39.611402 | ubuntu-noble | + 2026-06-02 08:52:39.611498 | ubuntu-noble | +## Session initiation information 2026-06-02 08:52:39.611598 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 08:52:39.611710 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 08:52:39.611814 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 08:52:39.611905 | ubuntu-noble | + 2026-06-02 08:52:39.612006 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 08:52:39.612111 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612416 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612430 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612468 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612609 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612711 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.612840 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613246 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613263 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613267 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613272 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613364 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613497 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:52:39.613594 | ubuntu-noble | + 2026-06-02 08:52:39.613693 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 08:52:39.613818 | ubuntu-noble | + 2026-06-02 08:52:39.613896 | ubuntu-noble | +## Reconnaissance 2026-06-02 08:52:39.613997 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 08:52:39.614097 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 08:52:39.614241 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 08:52:39.614311 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 08:52:39.614409 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 08:52:39.614509 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 08:52:39.614675 | ubuntu-noble | + 2026-06-02 08:52:39.614789 | ubuntu-noble | +## Suspicious activity 2026-06-02 08:52:39.615243 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 08:52:39.615262 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 08:52:39.615267 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 08:52:39.615271 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 08:52:39.615277 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 08:52:39.615380 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 08:52:39.615478 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 08:52:39.615576 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 08:52:39.615707 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 08:52:39.615823 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 08:52:39.615921 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 08:52:39.618370 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 08:52:39.618694 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 08:52:39.618867 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 08:52:39.619005 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 08:52:39.619125 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 08:52:39.619275 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 08:52:39.619442 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 08:52:39.619561 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 08:52:39.619677 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:52:39.619809 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:52:39.619924 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 08:52:39.620043 | ubuntu-noble | + 2026-06-02 08:52:39.620156 | ubuntu-noble | +## sssd 2026-06-02 08:52:39.620474 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.620496 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.620621 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.620743 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.620899 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.621013 | ubuntu-noble | + 2026-06-02 08:52:39.621130 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 08:52:39.621545 | ubuntu-noble | + 2026-06-02 08:52:39.621558 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 08:52:39.621562 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 08:52:39.621630 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 08:52:39.621752 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 08:52:39.621906 | ubuntu-noble | + 2026-06-02 08:52:39.622024 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 08:52:39.622144 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 08:52:39.622276 | ubuntu-noble | + 2026-06-02 08:52:39.622401 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:52:39.622520 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:52:39.622665 | ubuntu-noble | + 2026-06-02 08:52:39.622802 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 08:52:39.622926 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 08:52:39.623038 | ubuntu-noble | + 2026-06-02 08:52:39.623158 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 08:52:39.623303 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 08:52:39.623421 | ubuntu-noble | + 2026-06-02 08:52:39.623690 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:52:39.623712 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:52:39.623840 | ubuntu-noble | + 2026-06-02 08:52:39.623970 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:52:39.624089 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:52:39.624222 | ubuntu-noble | + 2026-06-02 08:52:39.624354 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 08:52:39.624475 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 08:52:39.624765 | ubuntu-noble | + 2026-06-02 08:52:39.624790 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 08:52:39.624868 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 08:52:39.624989 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:52:39.625109 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:52:39.625238 | ubuntu-noble | + 2026-06-02 08:52:39.625366 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 08:52:39.625486 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 08:52:39.625596 | ubuntu-noble | + 2026-06-02 08:52:39.625715 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 08:52:39.626903 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 08:52:39.626921 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 08:52:39.626925 | ubuntu-noble | + 2026-06-02 08:52:39.626929 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 08:52:39.626933 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 08:52:39.626937 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 08:52:39.626940 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 08:52:39.626944 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 08:52:39.626947 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 08:52:39.626951 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 08:52:39.627007 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 08:52:39.627130 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 08:52:39.627265 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 08:52:39.627387 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 08:52:39.627500 | ubuntu-noble | + 2026-06-02 08:52:39.627616 | ubuntu-noble | +### kde4 2026-06-02 08:52:39.627745 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.627892 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:52:39.628002 | ubuntu-noble | + 2026-06-02 08:52:39.628152 | ubuntu-noble | +## dbus-send invocation 2026-06-02 08:52:39.628290 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 08:52:39.628412 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 08:52:39.628531 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 08:52:39.628640 | ubuntu-noble | + 2026-06-02 08:52:39.628753 | ubuntu-noble | +## pkexec invocation 2026-06-02 08:52:39.628884 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 08:52:39.629001 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 08:52:39.629146 | ubuntu-noble | + 2026-06-02 08:52:39.629280 | ubuntu-noble | +## Suspicious shells 2026-06-02 08:52:39.629402 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 08:52:39.629517 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 08:52:39.629633 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 08:52:39.629748 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 08:52:39.629900 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 08:52:39.630017 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 08:52:39.630134 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 08:52:39.630295 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 08:52:39.630419 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 08:52:39.630527 | ubuntu-noble | + 2026-06-02 08:52:39.630641 | ubuntu-noble | +# Web Server Actvity 2026-06-02 08:52:39.630761 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 08:52:39.630893 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 08:52:39.631003 | ubuntu-noble | + 2026-06-02 08:52:39.631116 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 08:52:39.631243 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 08:52:39.631405 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 08:52:39.631523 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 08:52:39.631645 | ubuntu-noble | + 2026-06-02 08:52:39.631761 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 08:52:39.631908 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 08:52:39.632023 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 08:52:39.632131 | ubuntu-noble | + 2026-06-02 08:52:39.632262 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 08:52:39.632417 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 08:52:39.632534 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 08:52:39.632646 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 08:52:39.632757 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 08:52:39.632884 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 08:52:39.633430 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 08:52:39.633442 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 08:52:39.633446 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 08:52:39.633449 | ubuntu-noble | + 2026-06-02 08:52:39.633453 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 08:52:39.633559 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 08:52:39.633677 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 08:52:39.633804 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 08:52:39.633915 | ubuntu-noble | + 2026-06-02 08:52:39.634029 | ubuntu-noble | +## Injection 2026-06-02 08:52:39.634144 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 08:52:39.634274 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 08:52:39.634398 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 08:52:39.634548 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 08:52:39.634669 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 08:52:39.634819 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 08:52:39.634933 | ubuntu-noble | + 2026-06-02 08:52:39.635049 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 08:52:39.635165 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 08:52:39.635310 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 08:52:39.635433 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 08:52:39.635574 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 08:52:39.635683 | ubuntu-noble | + 2026-06-02 08:52:39.635815 | ubuntu-noble | +## Privilege Abuse 2026-06-02 08:52:39.635937 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 08:52:39.636055 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 08:52:39.636162 | ubuntu-noble | + 2026-06-02 08:52:39.636292 | ubuntu-noble | +# Socket Creations 2026-06-02 08:52:39.636422 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 08:52:39.636532 | ubuntu-noble | + 2026-06-02 08:52:39.637224 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:52:39.637238 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:52:39.637242 | ubuntu-noble | + 2026-06-02 08:52:39.637246 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:52:39.637249 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:52:39.637253 | ubuntu-noble | + 2026-06-02 08:52:39.637363 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 08:52:39.637524 | ubuntu-noble | + 2026-06-02 08:52:39.637657 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 08:52:39.637935 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 08:52:39.638083 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 08:52:39.638216 | ubuntu-noble | + 2026-06-02 08:52:39.638346 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 08:52:39.638466 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 08:52:39.638577 | ubuntu-noble | + 2026-06-02 08:52:39.638714 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 08:52:39.638907 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 08:52:39.639027 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 08:52:39.639142 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 08:52:39.639291 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 08:52:39.639405 | ubuntu-noble | + 2026-06-02 08:52:39.639519 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 08:52:39.639633 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 08:52:39.639749 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 08:52:39.639946 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 08:52:39.640068 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 08:52:39.640183 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 08:52:39.640314 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 08:52:39.640434 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 08:52:39.640544 | ubuntu-noble | + 2026-06-02 08:52:39.640658 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 08:52:39.640790 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:52:39.640910 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642217 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642233 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642237 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642241 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642244 | ubuntu-noble | + 2026-06-02 08:52:39.642248 | ubuntu-noble | +# npm 2026-06-02 08:52:39.642252 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:52:39.642256 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 08:52:39.642260 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 08:52:39.642264 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642268 | ubuntu-noble | + 2026-06-02 08:52:39.642272 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 08:52:39.642346 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:52:39.642464 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 08:52:39.642590 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 08:52:39.642699 | ubuntu-noble | + 2026-06-02 08:52:39.642837 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 08:52:39.642955 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:52:39.643071 | ubuntu-noble | +## https://rubygems.org 2026-06-02 08:52:39.643188 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 08:52:39.643316 | ubuntu-noble | + 2026-06-02 08:52:39.643465 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 08:52:39.643579 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:52:39.643690 | ubuntu-noble | +## https://luarocks.org 2026-06-02 08:52:39.643822 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 08:52:39.643932 | ubuntu-noble | + 2026-06-02 08:52:39.644048 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 08:52:39.644167 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 08:52:39.644297 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:52:39.644444 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 08:52:39.644564 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 08:52:39.644674 | ubuntu-noble | + 2026-06-02 08:52:39.644801 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 08:52:39.644912 | ubuntu-noble | + 2026-06-02 08:52:39.645023 | ubuntu-noble | +## GDS specific secrets 2026-06-02 08:52:39.645137 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 08:52:39.645276 | ubuntu-noble | + 2026-06-02 08:52:39.645395 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 08:52:39.645548 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 08:52:39.645667 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 08:52:39.645812 | ubuntu-noble | + 2026-06-02 08:52:39.645938 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 08:52:39.646052 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 08:52:39.646160 | ubuntu-noble | + 2026-06-02 08:52:39.646289 | ubuntu-noble | +## Salt 2026-06-02 08:52:39.646413 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 08:52:39.646530 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 08:52:39.646676 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 08:52:39.646828 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 08:52:39.646940 | ubuntu-noble | + 2026-06-02 08:52:39.647051 | ubuntu-noble | +## Otter 2026-06-02 08:52:39.647166 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 08:52:39.647320 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 08:52:39.647434 | ubuntu-noble | + 2026-06-02 08:52:39.647549 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 08:52:39.647698 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 08:52:39.647829 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 08:52:39.647948 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 08:52:39.648059 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.648175 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 08:52:39.648306 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 08:52:39.648720 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 08:52:39.648728 | ubuntu-noble | + 2026-06-02 08:52:39.648732 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 08:52:39.648755 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 08:52:39.648882 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.648999 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 08:52:39.649109 | ubuntu-noble | + 2026-06-02 08:52:39.649254 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 08:52:39.649376 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 08:52:39.649486 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.649599 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 08:52:39.649706 | ubuntu-noble | + 2026-06-02 08:52:39.649892 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 08:52:39.650004 | ubuntu-noble | + 2026-06-02 08:52:39.650127 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 08:52:39.650256 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.650378 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 08:52:39.650485 | ubuntu-noble | + 2026-06-02 08:52:39.650599 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 08:52:39.650896 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 08:52:39.650904 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.650972 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 08:52:39.651082 | ubuntu-noble | + 2026-06-02 08:52:39.651210 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 08:52:39.651334 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 08:52:39.651446 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.651591 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 08:52:39.651702 | ubuntu-noble | + 2026-06-02 08:52:39.651861 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 08:52:39.652024 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 08:52:39.653052 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.653069 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 08:52:39.653074 | ubuntu-noble | + 2026-06-02 08:52:39.653077 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 08:52:39.653081 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 08:52:39.653084 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.653088 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 08:52:39.653092 | ubuntu-noble | + 2026-06-02 08:52:39.653223 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 08:52:39.653345 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 08:52:39.653455 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.653568 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 08:52:39.653675 | ubuntu-noble | + 2026-06-02 08:52:39.653832 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 08:52:39.653951 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 08:52:39.654064 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 08:52:39.654228 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 08:52:39.654349 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 08:52:39.654459 | ubuntu-noble | +### macOS 2026-06-02 08:52:39.654572 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 08:52:39.654688 | ubuntu-noble | + 2026-06-02 08:52:39.654831 | ubuntu-noble | +## Docker 2026-06-02 08:52:39.654949 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 08:52:39.655063 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 08:52:39.655220 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 08:52:39.655342 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 08:52:39.655456 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 08:52:39.655566 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 08:52:39.655689 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 08:52:39.655818 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 08:52:39.655932 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 08:52:39.656059 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 08:52:39.656165 | ubuntu-noble | + 2026-06-02 08:52:39.656314 | ubuntu-noble | +## Virtualization stuff 2026-06-02 08:52:39.656434 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 08:52:39.656546 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 08:52:39.656664 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 08:52:39.656792 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 08:52:39.656920 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 08:52:39.657042 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 08:52:39.657164 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 08:52:39.657329 | ubuntu-noble | + 2026-06-02 08:52:39.657451 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 08:52:39.657557 | ubuntu-noble | + 2026-06-02 08:52:39.657670 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 08:52:39.657823 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 08:52:39.657946 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 08:52:39.658062 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 08:52:39.658179 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 08:52:39.658311 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 08:52:39.658473 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 08:52:39.658590 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 08:52:39.658704 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 08:52:39.658839 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 08:52:39.658956 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 08:52:39.659078 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 08:52:39.659209 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 08:52:39.659335 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 08:52:39.659484 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 08:52:39.659602 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 08:52:39.659717 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 08:52:39.659839 | ubuntu-noble | + 2026-06-02 08:52:39.659957 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 08:52:39.660519 | ubuntu-noble | + 2026-06-02 08:52:39.660532 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 08:52:39.660535 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 08:52:39.660539 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 08:52:39.660608 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 08:52:39.660726 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 08:52:39.660885 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 08:52:39.661000 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 08:52:39.661117 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 08:52:39.661245 | ubuntu-noble | + 2026-06-02 08:52:39.661366 | ubuntu-noble | +### qemu on macOS 2026-06-02 08:52:39.661473 | ubuntu-noble | + 2026-06-02 08:52:39.661621 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 08:52:39.661737 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 08:52:39.661868 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 08:52:39.661981 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 08:52:39.662104 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 08:52:39.662227 | ubuntu-noble | + 2026-06-02 08:52:39.662343 | ubuntu-noble | +## Kubelet 2026-06-02 08:52:39.662456 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 08:52:39.662563 | ubuntu-noble | + 2026-06-02 08:52:39.662708 | ubuntu-noble | +# ipc system call 2026-06-02 08:52:39.662843 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 08:52:39.662951 | ubuntu-noble | + 2026-06-02 08:52:39.663062 | ubuntu-noble | +## msgctl 2026-06-02 08:52:39.663182 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 08:52:39.663311 | ubuntu-noble | +## msgget 2026-06-02 08:52:39.663450 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 08:52:39.663582 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:39.663733 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 08:52:39.663871 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 08:52:39.663982 | ubuntu-noble | + 2026-06-02 08:52:39.664843 | ubuntu-noble | +## semctl 2026-06-02 08:52:39.664858 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 08:52:39.664862 | ubuntu-noble | +## semget 2026-06-02 08:52:39.664865 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 08:52:39.664869 | ubuntu-noble | +## semop 2026-06-02 08:52:39.664881 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 08:52:39.664885 | ubuntu-noble | +## semtimedop 2026-06-02 08:52:39.664889 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 08:52:39.665020 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:39.665138 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 08:52:39.665272 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 08:52:39.665395 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 08:52:39.665513 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 08:52:39.665629 | ubuntu-noble | + 2026-06-02 08:52:39.665739 | ubuntu-noble | +## shmctl 2026-06-02 08:52:39.665874 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 08:52:39.666018 | ubuntu-noble | +## shmget 2026-06-02 08:52:39.666137 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 08:52:39.666268 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:52:39.666389 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 08:52:39.666508 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 08:52:39.666616 | ubuntu-noble | + 2026-06-02 08:52:39.666730 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 08:52:39.666875 | ubuntu-noble | + 2026-06-02 08:52:39.667023 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 08:52:39.667133 | ubuntu-noble | + 2026-06-02 08:52:39.667261 | ubuntu-noble | +## Common Shells 2026-06-02 08:52:39.667379 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 08:52:39.667493 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 08:52:39.667615 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 08:52:39.667737 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 08:52:39.667867 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 08:52:39.667984 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 08:52:39.668123 | ubuntu-noble | + 2026-06-02 08:52:39.668251 | ubuntu-noble | +## Root command executions 2026-06-02 08:52:39.669138 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 08:52:39.669152 | ubuntu-noble | + 2026-06-02 08:52:39.669156 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 08:52:39.669160 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 08:52:39.669164 | ubuntu-noble | + 2026-06-02 08:52:39.669167 | ubuntu-noble | +## File Access 2026-06-02 08:52:39.669171 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 08:52:39.669254 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:52:39.669388 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:52:39.669500 | ubuntu-noble | + 2026-06-02 08:52:39.669616 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 08:52:39.669738 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 08:52:39.669877 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 08:52:39.669986 | ubuntu-noble | + 2026-06-02 08:52:39.670099 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 08:52:39.670268 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 08:52:39.670412 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 08:52:39.670520 | ubuntu-noble | + 2026-06-02 08:52:39.670633 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 08:52:39.670750 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 08:52:39.670883 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 08:52:39.671001 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 08:52:39.671115 | ubuntu-noble | +### bit API. 2026-06-02 08:52:39.671257 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 08:52:39.671400 | ubuntu-noble | + 2026-06-02 08:52:39.671518 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 08:52:39.671625 | ubuntu-noble | + 2026-06-02 08:52:39.671733 | ubuntu-noble | +##-e 2 2026-06-02 08:52:39.671854 | ubuntu-noble | 2026-06-02 08:52:39.672100 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780390358.6321235-2462-122895060703216/.source.rules", "state": "file", "uid": 0} 2026-06-02 08:52:39.672228 | ubuntu-noble | 2026-06-02 08:52:39.672386 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 08:52:40.493341 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ActiveEnterTimestampMonotonic": "517045496", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:32 UTC", "AssertTimestampMonotonic": "516975045", "Before": "sysinit.target shutdown.target ssh.service systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "51070000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ConditionTimestampMonotonic": "516974956", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2231", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ExecMainStartTimestampMonotonic": "517011520", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2230 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2230 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2234 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2234 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:32 UTC", "InactiveExitTimestampMonotonic": "516981312", "InvocationID": "d1502e6860b148d08deb4f5394c90f55", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2231", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3522269184", "MemoryCurrent": "499712", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2154496", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:52:32 UTC", "StateChangeTimestampMonotonic": "517045496", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:40.502759 | ubuntu-noble | 2026-06-02 08:52:40.502980 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 08:52:41.008281 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008493", "end": "2026-06-02 08:52:40.955112", "msg": "", "rc": 0, "start": "2026-06-02 08:52:40.946619", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 08:52:41.008374 | ubuntu-noble | 2026-06-02 08:52:41.008389 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 08:52:41.406074 | ubuntu-noble | --- before 2026-06-02 08:52:41.406121 | ubuntu-noble | +++ after 2026-06-02 08:52:41.406125 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 08:52:41.406134 | ubuntu-noble | { 2026-06-02 08:52:41.407268 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 08:52:41.407293 | ubuntu-noble | - "state": "file" 2026-06-02 08:52:41.407299 | ubuntu-noble | + "state": "absent" 2026-06-02 08:52:41.407474 | ubuntu-noble | } 2026-06-02 08:52:41.407779 | ubuntu-noble | 2026-06-02 08:52:41.408229 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 08:52:41.408588 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 08:52:41.408884 | ubuntu-noble | 2026-06-02 08:52:41.409179 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:52:42.155909 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ActiveEnterTimestampMonotonic": "517045496", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:32 UTC", "AssertTimestampMonotonic": "516975045", "Before": "sysinit.target shutdown.target ssh.service systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "52660000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ConditionTimestampMonotonic": "516974956", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2231", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:32 UTC", "ExecMainStartTimestampMonotonic": "517011520", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2230 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2230 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2234 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:32 UTC] ; stop_time=[Tue 2026-06-02 08:52:32 UTC] ; pid=2234 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:32 UTC", "InactiveExitTimestampMonotonic": "516981312", "InvocationID": "d1502e6860b148d08deb4f5394c90f55", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2231", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3528908800", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2154496", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:52:32 UTC", "StateChangeTimestampMonotonic": "517045496", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:42.162598 | ubuntu-noble | 2026-06-02 08:52:42.163031 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 08:52:42.608555 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.066857", "end": "2026-06-02 08:52:42.549104", "msg": "", "rc": 0, "start": "2026-06-02 08:52:42.482247", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2625\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1071\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2625\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1068\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2625", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1071", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2625", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1068", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 08:52:42.608635 | ubuntu-noble | 2026-06-02 08:52:42.608710 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:52:43.392752 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:52:42 UTC", "ActiveEnterTimestampMonotonic": "526849256", "ActiveExitTimestamp": "Tue 2026-06-02 08:52:41 UTC", "ActiveExitTimestampMonotonic": "526700944", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:52:41 UTC", "AssertTimestampMonotonic": "526748921", "Before": "sysinit.target shutdown.target ssh.service systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "143806000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:52:41 UTC", "ConditionTimestampMonotonic": "526748807", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2625", "ExecMainStartTimestamp": "Tue 2026-06-02 08:52:42 UTC", "ExecMainStartTimestampMonotonic": "526779871", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:52:41 UTC] ; stop_time=[Tue 2026-06-02 08:52:42 UTC] ; pid=2624 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:52:41 UTC] ; stop_time=[Tue 2026-06-02 08:52:42 UTC] ; pid=2624 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:52:42 UTC] ; stop_time=[Tue 2026-06-02 08:52:42 UTC] ; pid=2628 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:52:42 UTC] ; stop_time=[Tue 2026-06-02 08:52:42 UTC] ; pid=2628 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 08:52:41 UTC", "InactiveEnterTimestampMonotonic": "526744520", "InactiveExitTimestamp": "Tue 2026-06-02 08:52:41 UTC", "InactiveExitTimestampMonotonic": "526756082", "InvocationID": "280faed08bdd4945b0a2e86808ede609", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2625", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3558793216", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2121728", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:52:42 UTC", "StateChangeTimestampMonotonic": "526849256", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:52:43.394460 | ubuntu-noble | 2026-06-02 08:52:43.394564 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 08:52:43.394694 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:52:43.394792 | ubuntu-noble | 2026-06-02 08:52:43.664190 | ubuntu-noble | ok: Runtime: 0:00:21.154706 2026-06-02 08:52:43.687910 | 2026-06-02 08:52:43.688060 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 08:52:43.504659 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 08:52:43.505138 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:52:44.511296 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:44.523538 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:44.417458 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:52:44.434007 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:45.114676 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:45.115358 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:45.141513 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:45.147528 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 08:52:45.147598 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:44.931051 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:52:44.931712 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:52:44.954234 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:52:44.959814 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 08:52:44.959876 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:52:46.736913 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 08:52:46.373436 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 08:52:46.375013 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 08:52:46.375971 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:46.375991 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:46.375999 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:46.376005 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:46.376011 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:46.376016 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:52:46.376021 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:46.376027 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:46.376032 | debian-bookworm | 2026-06-02 08:52:46.376211 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:46.376221 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:52:46.376226 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:46.376231 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:46.376236 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:46.376242 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:46.376247 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:46.376252 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:46.376257 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:46.376263 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:46.376268 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:46.376273 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:46.376278 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:46.376283 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:46.376288 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:46.376293 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:46.376298 | debian-bookworm | 2026-06-02 08:52:46.376473 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:46.625048 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 08:52:46.641486 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 08:52:46.641549 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 08:52:46.641566 | debian-bookworm | using: pytest-8.4.2 2026-06-02 08:52:46.641581 | debian-bookworm | registered third-party plugins: 2026-06-02 08:52:46.641594 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 08:52:46.641607 | debian-bookworm | rootdir: /home/zuul 2026-06-02 08:52:46.641620 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 08:52:46.739340 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 08:52:46.740724 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:52:46.740740 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:52:46.740750 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:52:46.740757 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:52:46.740763 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:52:46.740769 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:52:46.740774 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:52:46.740779 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:52:46.740784 | ubuntu-noble | 2026-06-02 08:52:46.740883 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:52:46.740890 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:52:46.740895 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:52:46.740900 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:52:46.740905 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:52:46.740910 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:52:46.740915 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:52:46.740920 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:52:46.740925 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:52:46.740931 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:52:46.740936 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:52:46.740941 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:52:46.740946 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:52:46.740951 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:52:46.740956 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:52:46.740961 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:46.740966 | ubuntu-noble | 2026-06-02 08:52:46.741070 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:52:47.025018 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 08:52:47.046267 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 08:52:47.046316 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 08:52:47.046327 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 08:52:47.046336 | ubuntu-noble | registered third-party plugins: 2026-06-02 08:52:47.046421 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 08:52:47.046728 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 08:52:47.047042 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 08:52:47.637675 | debian-bookworm | collecting ... collected 6 items 2026-06-02 08:52:47.637760 | debian-bookworm | 2026-06-02 08:52:48.200065 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 08:52:48.200489 | ubuntu-noble | 2026-06-02 08:52:51.866238 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 08:52:51.901941 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 08:52:53.210495 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 08:52:53.253726 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 08:52:54.267360 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 08:52:56.102272 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 08:52:58.988304 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 08:53:00.223772 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 08:53:00.298673 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 08:53:00.299201 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 08:53:00.299310 | debian-bookworm | 2026-06-02 08:53:00.299421 | debian-bookworm | ============================== 6 passed in 13.62s ============================== 2026-06-02 08:53:00.340268 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 08:53:00.340375 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 08:53:00.340700 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:53:00.768891 | debian-bookworm | ok: Runtime: 0:00:16.344613 2026-06-02 08:53:01.215034 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 08:53:02.689194 | ubuntu-noble | ok: Runtime: 0:00:18.487621 2026-06-02 08:53:02.698812 | 2026-06-02 08:53:02.698998 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 08:53:02.464820 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 08:53:02.531106 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 08:53:02.534283 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 08:53:02.534346 | ubuntu-noble | 2026-06-02 08:53:02.534491 | ubuntu-noble | ============================== 6 passed in 15.45s ============================== 2026-06-02 08:53:02.574087 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 08:53:02.574408 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 08:53:02.575046 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:53:03.279396 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:53:03.280695 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:53:03.300891 | 2026-06-02 08:53:03.301015 | PLAY RECAP 2026-06-02 08:53:03.301083 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 08:53:03.301123 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 08:53:03.301149 | 2026-06-02 08:53:03.471940 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 08:53:03.474576 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 08:53:04.267494 | 2026-06-02 08:53:04.267698 | PLAY [Collect container logs] 2026-06-02 08:53:04.282213 | 2026-06-02 08:53:04.282348 | TASK [Create container log directory] 2026-06-02 08:53:04.945128 | ubuntu-noble | changed 2026-06-02 08:53:04.954630 | debian-bookworm | changed 2026-06-02 08:53:04.960643 | 2026-06-02 08:53:04.960896 | TASK [Capture container overview] 2026-06-02 08:53:05.548220 | debian-bookworm | ok: Runtime: 0:00:00.008643 2026-06-02 08:53:05.555651 | ubuntu-noble | ok: Runtime: 0:00:00.010859 2026-06-02 08:53:05.562404 | 2026-06-02 08:53:05.562528 | TASK [List containers] 2026-06-02 08:53:06.126264 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 08:53:06.127158 | debian-bookworm | { 2026-06-02 08:53:06.127290 | debian-bookworm | "failed_when_result": false, 2026-06-02 08:53:06.127366 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 08:53:06.127441 | debian-bookworm | "rc": 2 2026-06-02 08:53:06.127524 | debian-bookworm | } 2026-06-02 08:53:06.140211 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 08:53:06.140453 | ubuntu-noble | { 2026-06-02 08:53:06.140533 | ubuntu-noble | "failed_when_result": false, 2026-06-02 08:53:06.140562 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 08:53:06.140586 | ubuntu-noble | "rc": 2 2026-06-02 08:53:06.140608 | ubuntu-noble | } 2026-06-02 08:53:06.146543 | 2026-06-02 08:53:06.146679 | LOOP [Save per-container logs] 2026-06-02 08:53:06.231175 | 2026-06-02 08:53:06.231849 | LOOP [Save per-container inspect (state and health)] 2026-06-02 08:53:06.313935 | 2026-06-02 08:53:06.314272 | TASK [Capture netbox systemd unit journal] 2026-06-02 08:53:06.882447 | debian-bookworm | ok: Runtime: 0:00:00.020204 2026-06-02 08:53:06.893815 | ubuntu-noble | ok: Runtime: 0:00:00.015808 2026-06-02 08:53:06.901064 | 2026-06-02 08:53:06.901191 | TASK [Capture netbox service state] 2026-06-02 08:53:07.501864 | ubuntu-noble | ok: Runtime: 0:00:00.028268 2026-06-02 08:53:07.515553 | debian-bookworm | ok: Runtime: 0:00:00.044424 2026-06-02 08:53:07.523978 | 2026-06-02 08:53:07.524127 | TASK [Capture docker compose version] 2026-06-02 08:53:08.086398 | debian-bookworm | ok: Runtime: 0:00:00.010654 2026-06-02 08:53:08.099310 | ubuntu-noble | ok: Runtime: 0:00:00.009462 2026-06-02 08:53:08.107617 | 2026-06-02 08:53:08.107775 | TASK [Open container log permissions] 2026-06-02 08:53:08.432696 | debian-bookworm | changed 2026-06-02 08:53:08.443363 | ubuntu-noble | changed 2026-06-02 08:53:08.445205 | 2026-06-02 08:53:08.445292 | PLAY RECAP 2026-06-02 08:53:08.445359 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 08:53:08.445401 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 08:53:08.445429 | 2026-06-02 08:53:08.594878 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 08:53:08.597312 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 08:53:09.407979 | 2026-06-02 08:53:09.408199 | PLAY [Base post-fetch] 2026-06-02 08:53:09.422788 | 2026-06-02 08:53:09.422960 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 08:53:09.496076 | debian-bookworm | ok 2026-06-02 08:53:09.521733 | ubuntu-noble | ok 2026-06-02 08:53:09.527008 | 2026-06-02 08:53:09.527155 | TASK [fetch-output : Set log path for single node] 2026-06-02 08:53:09.553521 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:53:09.564553 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:53:09.571326 | 2026-06-02 08:53:09.571479 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 08:53:10.101380 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/logs/debian-bookworm" 2026-06-02 08:53:10.104063 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/logs/ubuntu-noble" 2026-06-02 08:53:10.370236 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/artifacts" 2026-06-02 08:53:10.392478 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/artifacts" 2026-06-02 08:53:10.650983 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/docs" 2026-06-02 08:53:10.665856 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/e96892ef10c24d54bb2af3866302b3de/work/docs" 2026-06-02 08:53:10.666007 | debian-bookworm -> localhost | changed: All items complete 2026-06-02 08:53:10.666058 | 2026-06-02 08:53:10.678139 | 2026-06-02 08:53:10.678268 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 08:53:11.465050 | debian-bookworm | changed: 2026-06-02 08:53:11.465357 | debian-bookworm | .d..t...... ./ 2026-06-02 08:53:11.465399 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 08:53:11.465424 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 08:53:11.465447 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 08:53:11.465470 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 08:53:11.465490 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 08:53:11.465548 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 08:53:11.465568 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 08:53:11.465587 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 08:53:11.482609 | ubuntu-noble | changed: 2026-06-02 08:53:11.482732 | ubuntu-noble | .d..t...... ./ 2026-06-02 08:53:11.482767 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 08:53:11.482792 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 08:53:11.482814 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 08:53:11.482854 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 08:53:11.482875 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 08:53:11.482895 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 08:53:11.482914 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 08:53:11.482933 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 08:53:12.052970 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 08:53:12.066339 | debian-bookworm | ok 2026-06-02 08:53:12.645783 | debian-bookworm | changed: .d..t...... ./ 2026-06-02 08:53:12.652123 | ubuntu-noble | ok 2026-06-02 08:53:12.694459 | 2026-06-02 08:53:12.694641 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 08:53:13.247220 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.012420 2026-06-02 08:53:13.247549 | debian-bookworm -> localhost | changed: All items complete 2026-06-02 08:53:13.247603 | 2026-06-02 08:53:13.553610 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.010960 2026-06-02 08:53:13.568668 | 2026-06-02 08:53:13.568777 | PLAY RECAP 2026-06-02 08:53:13.568831 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 08:53:13.568863 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 08:53:13.568884 | 2026-06-02 08:53:13.705563 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 08:53:13.710649 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 08:53:14.489253 | 2026-06-02 08:53:14.489422 | PLAY [Base post] 2026-06-02 08:53:14.502879 | 2026-06-02 08:53:14.503033 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 08:53:15.396321 | debian-bookworm | changed 2026-06-02 08:53:15.419814 | ubuntu-noble | changed 2026-06-02 08:53:15.434292 | 2026-06-02 08:53:15.434416 | PLAY RECAP 2026-06-02 08:53:15.434530 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 08:53:15.434573 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 08:53:15.434600 | 2026-06-02 08:53:15.556642 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 08:53:15.560640 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 08:53:16.439640 | 2026-06-02 08:53:16.439816 | PLAY [Base post-logs] 2026-06-02 08:53:16.451083 | 2026-06-02 08:53:16.451243 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 08:53:16.964480 | localhost | changed 2026-06-02 08:53:16.976793 | 2026-06-02 08:53:16.976950 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 08:53:17.012825 | localhost | ok 2026-06-02 08:53:17.016300 | 2026-06-02 08:53:17.016405 | TASK [Set zuul-log-path fact] 2026-06-02 08:53:17.031880 | localhost | ok 2026-06-02 08:53:17.040366 | 2026-06-02 08:53:17.040522 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 08:53:17.065943 | localhost | ok 2026-06-02 08:53:17.069379 | 2026-06-02 08:53:17.069515 | TASK [upload-logs : Create log directories] 2026-06-02 08:53:17.584776 | localhost | changed 2026-06-02 08:53:17.593004 | 2026-06-02 08:53:17.593188 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 08:53:18.107347 | localhost -> localhost | ok: Runtime: 0:00:00.008026 2026-06-02 08:53:18.116447 | 2026-06-02 08:53:18.116643 | TASK [upload-logs : Upload logs to log server] 2026-06-02 08:53:18.712898 | localhost | Output suppressed because no_log was given 2026-06-02 08:53:18.715588 | 2026-06-02 08:53:18.716092 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 08:53:18.765453 | localhost | skipping: Conditional result was False 2026-06-02 08:53:18.770801 | localhost | skipping: Conditional result was False 2026-06-02 08:53:18.777611 | 2026-06-02 08:53:18.777803 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 08:53:18.827907 | localhost | skipping: Conditional result was False 2026-06-02 08:53:18.828595 | 2026-06-02 08:53:18.831870 | localhost | skipping: Conditional result was False 2026-06-02 08:53:18.838957 | 2026-06-02 08:53:18.839164 | LOOP [upload-logs : Upload console log and json output]