2026-06-02 06:29:15.712973 | Job console starting 2026-06-02 06:29:15.727371 | Updating git repos 2026-06-02 06:29:15.768218 | Cloning repos into workspace 2026-06-02 06:29:15.834820 | Restoring repo states 2026-06-02 06:29:15.852376 | Merging changes 2026-06-02 06:29:16.726250 | Checking out repos 2026-06-02 06:29:16.796287 | Preparing playbooks 2026-06-02 06:29:17.659844 | Running Ansible setup 2026-06-02 06:29:23.225111 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 06:29:23.987361 | 2026-06-02 06:29:23.987532 | PLAY [Base pre] 2026-06-02 06:29:24.005411 | 2026-06-02 06:29:24.005564 | TASK [Setup log path fact] 2026-06-02 06:29:24.036360 | debian-bookworm | ok 2026-06-02 06:29:24.051676 | 2026-06-02 06:29:24.051827 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 06:29:24.080942 | debian-bookworm | ok 2026-06-02 06:29:24.090953 | 2026-06-02 06:29:24.091068 | TASK [emit-job-header : Print job information] 2026-06-02 06:29:24.137446 | # Job Information 2026-06-02 06:29:24.137779 | Ansible Version: 2.16.14 2026-06-02 06:29:24.137953 | Job: ansible-collection-services-molecule-auditd 2026-06-02 06:29:24.138035 | Pipeline: check 2026-06-02 06:29:24.138084 | Executor: 521e9411259a 2026-06-02 06:29:24.138127 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 06:29:24.138174 | Event ID: 57934230-5e4c-11f1-8c1f-5bffec9c3286 2026-06-02 06:29:24.147771 | 2026-06-02 06:29:24.147941 | LOOP [emit-job-header : Print node information] 2026-06-02 06:29:24.265750 | debian-bookworm | ok: 2026-06-02 06:29:24.266018 | debian-bookworm | # Node Information 2026-06-02 06:29:24.266066 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 06:29:24.266092 | debian-bookworm | Hostname: debian 2026-06-02 06:29:24.266119 | debian-bookworm | Username: zuul 2026-06-02 06:29:24.266287 | debian-bookworm | Distro: Debian 12.14 2026-06-02 06:29:24.266327 | debian-bookworm | Provider: regiocloud-a 2026-06-02 06:29:24.266350 | debian-bookworm | Region: 2026-06-02 06:29:24.266372 | debian-bookworm | Label: debian-bookworm 2026-06-02 06:29:24.266392 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 06:29:24.266412 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe55:11fc 2026-06-02 06:29:24.320721 | debian-bookworm | ok: 2026-06-02 06:29:24.320935 | debian-bookworm | # Node Information 2026-06-02 06:29:24.321003 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 06:29:24.321057 | debian-bookworm | Hostname: ubuntu 2026-06-02 06:29:24.321112 | debian-bookworm | Username: zuul 2026-06-02 06:29:24.321159 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 06:29:24.321203 | debian-bookworm | Provider: regiocloud-a 2026-06-02 06:29:24.321247 | debian-bookworm | Region: 2026-06-02 06:29:24.321291 | debian-bookworm | Label: ubuntu-noble 2026-06-02 06:29:24.321334 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 06:29:24.321377 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fea2:897 2026-06-02 06:29:24.358149 | 2026-06-02 06:29:24.358340 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 06:29:24.850231 | debian-bookworm -> localhost | changed 2026-06-02 06:29:24.859489 | 2026-06-02 06:29:24.859653 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 06:29:25.988666 | debian-bookworm -> localhost | changed 2026-06-02 06:29:26.000775 | ubuntu-noble -> localhost | ok 2026-06-02 06:29:26.027515 | 2026-06-02 06:29:26.027712 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 06:29:26.311493 | debian-bookworm -> localhost | ok 2026-06-02 06:29:26.318164 | 2026-06-02 06:29:26.318309 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 06:29:26.360465 | debian-bookworm | ok 2026-06-02 06:29:26.364787 | ubuntu-noble | ok 2026-06-02 06:29:26.384133 | debian-bookworm | included: /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 06:29:26.384256 | ubuntu-noble | included: /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 06:29:26.390965 | 2026-06-02 06:29:26.391073 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 06:29:27.756478 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 06:29:27.756981 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/ed9dff0bb766448faf8637deb779e0e7_id_rsa 2026-06-02 06:29:27.757085 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/ed9dff0bb766448faf8637deb779e0e7_id_rsa.pub 2026-06-02 06:29:27.757156 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 06:29:27.757224 | debian-bookworm -> localhost | SHA256:uveT/GLM2yKq3HReJbnmT+RGkWU4X3oZlAx2H7UW1to zuul-build-sshkey 2026-06-02 06:29:27.757287 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 06:29:27.757356 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 06:29:27.757415 | debian-bookworm -> localhost | | +**=| 2026-06-02 06:29:27.757474 | debian-bookworm -> localhost | | ++o+B| 2026-06-02 06:29:27.757530 | debian-bookworm -> localhost | | oo B+| 2026-06-02 06:29:27.757583 | debian-bookworm -> localhost | | . .=.E| 2026-06-02 06:29:27.757687 | debian-bookworm -> localhost | | S o + . | 2026-06-02 06:29:27.757747 | debian-bookworm -> localhost | | . B | 2026-06-02 06:29:27.757801 | debian-bookworm -> localhost | | o .++.+ | 2026-06-02 06:29:27.757855 | debian-bookworm -> localhost | | . o +o+X+ | 2026-06-02 06:29:27.757907 | debian-bookworm -> localhost | | o.+o.++B+ | 2026-06-02 06:29:27.757956 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 06:29:27.758080 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.868337 2026-06-02 06:29:27.770819 | 2026-06-02 06:29:27.771009 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 06:29:27.806220 | debian-bookworm | ok 2026-06-02 06:29:27.811676 | ubuntu-noble | ok 2026-06-02 06:29:27.825895 | debian-bookworm | included: /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 06:29:27.825979 | ubuntu-noble | included: /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 06:29:27.837843 | 2026-06-02 06:29:27.837940 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 06:29:27.862217 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:29:27.873196 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:29:27.880268 | 2026-06-02 06:29:27.880377 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 06:29:28.511526 | debian-bookworm | changed 2026-06-02 06:29:28.639165 | ubuntu-noble | changed 2026-06-02 06:29:28.645758 | 2026-06-02 06:29:28.645912 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 06:29:28.937696 | debian-bookworm | ok 2026-06-02 06:29:28.957370 | ubuntu-noble | ok 2026-06-02 06:29:28.964076 | 2026-06-02 06:29:28.964222 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 06:29:29.640718 | debian-bookworm | changed 2026-06-02 06:29:29.769020 | ubuntu-noble | changed 2026-06-02 06:29:29.782135 | 2026-06-02 06:29:29.782360 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 06:29:30.527059 | debian-bookworm | changed 2026-06-02 06:29:30.609754 | ubuntu-noble | changed 2026-06-02 06:29:30.618383 | 2026-06-02 06:29:30.618533 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 06:29:30.646170 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:29:30.647417 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:29:30.653366 | 2026-06-02 06:29:30.653479 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 06:29:31.073013 | debian-bookworm -> localhost | changed 2026-06-02 06:29:31.090876 | 2026-06-02 06:29:31.091030 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 06:29:31.480998 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/ed9dff0bb766448faf8637deb779e0e7_id_rsa (zuul-build-sshkey) 2026-06-02 06:29:31.481328 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.011396 2026-06-02 06:29:31.489563 | 2026-06-02 06:29:31.489735 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 06:29:31.864927 | debian-bookworm | ok 2026-06-02 06:29:31.926797 | ubuntu-noble | ok 2026-06-02 06:29:31.953513 | 2026-06-02 06:29:31.953686 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 06:29:31.979260 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:29:32.000764 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:29:32.023925 | 2026-06-02 06:29:32.024070 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 06:29:32.418069 | debian-bookworm | ok 2026-06-02 06:29:32.436447 | ubuntu-noble | ok 2026-06-02 06:29:32.453949 | 2026-06-02 06:29:32.454069 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 06:29:32.496662 | debian-bookworm | ok 2026-06-02 06:29:32.501338 | ubuntu-noble | ok 2026-06-02 06:29:32.506804 | 2026-06-02 06:29:32.506964 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 06:29:32.815619 | debian-bookworm -> localhost | ok 2026-06-02 06:29:32.822603 | 2026-06-02 06:29:32.822760 | TASK [validate-host : Collect information about the host] 2026-06-02 06:29:33.888517 | debian-bookworm | ok 2026-06-02 06:29:34.176493 | ubuntu-noble | ok 2026-06-02 06:29:34.191483 | 2026-06-02 06:29:34.191661 | TASK [validate-host : Sanitize hostname] 2026-06-02 06:29:34.262516 | debian-bookworm | ok 2026-06-02 06:29:34.267787 | ubuntu-noble | ok 2026-06-02 06:29:34.272816 | 2026-06-02 06:29:34.272926 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 06:29:34.845189 | ubuntu-noble -> localhost | changed 2026-06-02 06:29:34.849084 | debian-bookworm -> localhost | changed 2026-06-02 06:29:34.861705 | 2026-06-02 06:29:34.861877 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 06:29:35.357327 | debian-bookworm | ok 2026-06-02 06:29:35.396116 | ubuntu-noble | ok 2026-06-02 06:29:35.402358 | 2026-06-02 06:29:35.402498 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 06:29:35.942489 | ubuntu-noble -> localhost | changed 2026-06-02 06:29:35.984839 | debian-bookworm -> localhost | changed 2026-06-02 06:29:36.000709 | 2026-06-02 06:29:36.000856 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 06:29:36.306967 | debian-bookworm | ok 2026-06-02 06:29:36.369040 | ubuntu-noble | ok 2026-06-02 06:29:36.379049 | 2026-06-02 06:29:36.379218 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 06:29:37.706366 | debian-bookworm | changed: 2026-06-02 06:29:37.706727 | debian-bookworm | cd+++++++++ src/ 2026-06-02 06:29:37.706775 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 06:29:37.706800 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 06:29:37.706821 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 06:29:37.706888 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:30:55.879678 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:30:55.909866 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:30:56.503148 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:30:56.503771 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:30:56.525316 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:30:56.530910 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 06:30:56.530949 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:30:56.474781 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:30:56.475406 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:30:56.495819 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:30:56.500974 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 06:30:56.501097 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:30:57.711067 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 06:30:57.712582 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 06:30:57.638946 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 06:30:57.639419 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 06:30:58.077545 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 06:30:58.077587 | ubuntu-noble | config file = None 2026-06-02 06:30:58.077594 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 06:30:58.077600 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 06:30:58.077609 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 06:30:58.077688 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 06:30:58.078007 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 06:30:58.078296 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 06:30:58.078658 | ubuntu-noble | libyaml = True 2026-06-02 06:30:58.078948 | ubuntu-noble | No config file found; using defaults 2026-06-02 06:30:58.079463 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 06:30:58.088757 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 06:30:58.089168 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 06:30:58.099681 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 06:30:58.100096 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 06:30:58.100397 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 06:30:58.101019 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 06:30:58.101365 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 06:30:58.101784 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 06:30:58.102189 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 06:30:58.102575 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 06:30:58.103025 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 06:30:58.103496 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 06:30:58.104882 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 06:30:58.105245 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 06:30:58.105684 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 06:30:58.106047 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 06:30:58.106308 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 06:30:58.106731 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 06:30:58.108063 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 06:30:58.108466 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 06:30:58.108773 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 06:30:58.109116 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 06:30:58.109372 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 06:30:58.109781 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 06:30:58.110420 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 06:30:58.110871 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 06:30:58.111228 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 06:30:58.111556 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 06:30:58.112029 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 06:30:58.112364 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 06:30:58.112785 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 06:30:58.113124 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 06:30:58.113714 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 06:30:58.113990 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 06:30:58.114369 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 06:30:58.114711 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 06:30:58.115806 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 06:30:58.116390 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 06:30:58.116769 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 06:30:58.116992 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 06:30:58.117286 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 06:30:58.117570 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 06:30:58.117948 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 06:30:58.118244 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 06:30:58.118481 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 06:30:58.118831 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 06:30:58.119072 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 06:30:58.119374 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 06:30:58.119677 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 06:30:58.119904 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 06:30:58.174417 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 06:30:58.174968 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 06:30:58.175404 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 06:30:58.175886 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 06:30:58.176275 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 06:30:58.176665 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 06:30:58.177051 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 06:30:58.177346 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 06:30:58.178926 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 06:30:58.179272 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 06:30:58.179712 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 06:30:58.181525 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 06:30:58.181542 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 06:30:58.181546 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 06:30:58.181551 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 06:30:58.181844 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 06:30:58.182197 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 06:30:58.182558 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 06:30:58.185822 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 06:30:58.186155 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 06:30:58.186387 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 06:30:58.186883 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 06:30:58.187207 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 06:30:58.187623 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 06:30:58.189000 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 06:30:58.189287 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 06:30:58.189933 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 06:30:58.190229 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 06:30:58.190586 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 06:30:58.190952 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 06:30:58.191238 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 06:30:58.191601 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 06:30:58.191982 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 06:30:58.192260 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 06:30:58.192755 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 06:30:58.193021 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 06:30:58.193255 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 06:30:58.193548 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 06:30:58.193970 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 06:30:58.194205 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 06:30:58.194833 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 06:30:58.196006 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 06:30:58.197714 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 06:30:58.199145 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 06:30:58.202221 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 06:30:58.203238 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 06:30:58.204099 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 06:30:58.204985 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 06:30:58.206229 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 06:30:58.207245 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 06:30:58.210566 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 06:30:58.211475 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 06:30:58.212016 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 06:30:58.212626 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 06:30:58.213589 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 06:30:58.214081 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 06:30:58.215709 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 06:30:58.216265 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 06:30:58.217056 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 06:30:58.217753 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 06:30:58.220273 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 06:30:58.220840 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 06:30:58.221243 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 06:30:58.221858 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 06:30:58.222430 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 06:30:58.222913 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 06:30:58.223767 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 06:30:58.224554 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 06:30:58.224579 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 06:30:58.225073 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 06:30:58.226209 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 06:30:58.226243 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 06:30:58.226252 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 06:30:58.226619 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 06:30:58.227932 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 06:30:58.228299 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 06:30:58.236755 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 06:30:58.237246 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 06:30:58.238693 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 06:30:58.239075 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 06:30:58.239425 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 06:30:58.239751 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 06:30:58.240316 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 06:30:58.240732 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 06:30:58.244303 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 06:30:58.244723 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 06:30:58.245541 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 06:30:58.245570 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 06:30:58.245818 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 06:30:58.246224 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 06:30:58.246544 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 06:30:58.246838 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 06:30:58.248645 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 06:30:58.249148 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 06:30:58.249660 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 06:30:58.250140 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 06:30:58.251168 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 06:30:58.251205 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 06:30:58.253545 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 06:30:58.253578 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 06:30:58.253589 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 06:30:58.253598 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 06:30:58.253607 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 06:30:58.253867 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 06:30:58.254262 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 06:30:58.254723 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 06:30:58.255049 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 06:30:58.255531 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 06:30:58.256360 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 06:30:58.256876 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 06:30:58.257227 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 06:30:58.257606 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 06:30:58.258379 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 06:30:58.258776 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 06:30:58.259120 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 06:30:58.259401 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 06:30:58.259767 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 06:30:58.260029 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 06:30:58.260346 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 06:30:58.260707 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 06:30:58.261032 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 06:30:58.261348 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 06:30:58.262119 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 06:30:58.262381 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 06:30:58.263401 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 06:30:58.263803 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 06:30:58.264042 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 06:30:58.264263 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 06:30:58.265612 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 06:30:58.265890 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 06:30:58.266147 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 06:30:58.266401 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 06:30:58.266715 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 06:30:58.266933 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 06:30:58.267204 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 06:30:58.267450 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 06:30:58.267739 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 06:30:58.267964 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 06:30:58.271328 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 06:30:58.271354 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 06:30:58.271361 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 06:30:58.271381 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 06:30:58.271387 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 06:30:58.271393 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 06:30:58.280796 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 06:30:58.280822 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 06:30:58.280829 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 06:30:58.281067 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 06:30:58.285268 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 06:30:58.285863 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 06:30:58.286235 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 06:30:57.986170 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 06:30:58.059433 | debian-bookworm | config file = None 2026-06-02 06:30:58.059486 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 06:30:58.059500 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 06:30:58.059521 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 06:30:58.059545 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 06:30:58.059556 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 06:30:58.059567 | debian-bookworm | jinja version = 3.1.6 2026-06-02 06:30:58.059577 | debian-bookworm | libyaml = True 2026-06-02 06:30:58.059588 | debian-bookworm | No config file found; using defaults 2026-06-02 06:30:58.060758 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 06:30:58.072220 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 06:30:58.072857 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 06:30:58.080118 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 06:30:58.080557 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 06:30:58.080950 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 06:30:58.081386 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 06:30:58.082121 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 06:30:58.082577 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 06:30:58.082956 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 06:30:58.083373 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 06:30:58.083750 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 06:30:58.084123 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 06:30:58.084716 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 06:30:58.085014 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 06:30:58.085329 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 06:30:58.085791 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 06:30:58.086973 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 06:30:58.087272 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 06:30:58.087985 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 06:30:58.088365 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 06:30:58.088587 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 06:30:58.088876 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 06:30:58.089157 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 06:30:58.089484 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 06:30:58.094975 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 06:30:58.095353 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 06:30:58.095621 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 06:30:58.095895 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 06:30:58.096486 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 06:30:58.096756 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 06:30:58.097235 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 06:30:58.097515 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 06:30:58.098329 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 06:30:58.098602 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 06:30:58.100241 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 06:30:58.100593 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 06:30:58.100868 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 06:30:58.101138 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 06:30:58.104293 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 06:30:58.104640 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 06:30:58.104979 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 06:30:58.105269 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 06:30:58.107365 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 06:30:58.107637 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 06:30:58.108725 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 06:30:58.108989 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 06:30:58.109338 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 06:30:58.109664 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 06:30:58.111166 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 06:30:58.111485 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 06:30:58.111761 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 06:30:58.112032 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 06:30:58.113381 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 06:30:58.113685 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 06:30:58.113945 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 06:30:58.114232 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 06:30:58.114574 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 06:30:58.114849 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 06:30:58.115120 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 06:30:58.115410 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 06:30:58.115673 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 06:30:58.115938 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 06:30:58.116548 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 06:30:58.116828 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 06:30:58.117097 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 06:30:58.117382 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 06:30:58.117702 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 06:30:58.117970 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 06:30:58.118269 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 06:30:58.118541 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 06:30:58.154063 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 06:30:58.154616 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 06:30:58.154937 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 06:30:58.155269 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 06:30:58.155673 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 06:30:58.155959 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 06:30:58.156412 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 06:30:58.156778 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 06:30:58.158219 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 06:30:58.158627 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 06:30:58.159605 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 06:30:58.160009 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 06:30:58.160417 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 06:30:58.160709 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 06:30:58.161128 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 06:30:58.161552 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 06:30:58.161904 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 06:30:58.162291 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 06:30:58.162707 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 06:30:58.163046 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 06:30:58.163624 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 06:30:58.163986 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 06:30:58.164421 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 06:30:58.164768 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 06:30:58.165108 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 06:30:58.165510 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 06:30:58.165850 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 06:30:58.166227 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 06:30:58.167140 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 06:30:58.167445 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 06:30:58.167921 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 06:30:58.168283 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 06:30:58.168642 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 06:30:58.169001 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 06:30:58.169311 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 06:30:58.169658 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 06:30:58.170497 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 06:30:58.170801 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 06:30:58.171083 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 06:30:58.171385 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 06:30:58.171834 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 06:30:58.172061 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 06:30:58.172407 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 06:30:58.172759 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 06:30:58.173089 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 06:30:58.173544 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 06:30:58.173776 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 06:30:58.173991 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 06:30:58.174222 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 06:30:58.174486 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 06:30:58.174758 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 06:30:58.175039 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 06:30:58.175281 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 06:30:58.175535 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 06:30:58.177421 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 06:30:58.177701 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 06:30:58.180094 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 06:30:58.180351 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 06:30:58.180649 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 06:30:58.180984 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 06:30:58.184423 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 06:30:58.184645 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 06:30:58.186566 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 06:30:58.186864 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 06:30:58.187602 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 06:30:58.187910 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 06:30:58.188444 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 06:30:58.188737 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 06:30:58.189449 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 06:30:58.189767 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 06:30:58.189968 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 06:30:58.190262 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 06:30:58.190520 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 06:30:58.190797 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 06:30:58.191660 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 06:30:58.191924 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 06:30:58.192163 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 06:30:58.192496 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 06:30:58.193270 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 06:30:58.193570 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 06:30:58.194413 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 06:30:58.194643 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 06:30:58.194953 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 06:30:58.195229 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 06:30:58.196104 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 06:30:58.196359 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 06:30:58.196709 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 06:30:58.197020 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 06:30:58.197583 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 06:30:58.197819 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 06:30:58.199463 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 06:30:58.199811 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 06:30:58.200140 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 06:30:58.200506 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 06:30:58.200836 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 06:30:58.201162 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 06:30:58.201629 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 06:30:58.201944 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 06:30:58.204856 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 06:30:58.205233 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 06:30:58.205591 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 06:30:58.205893 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 06:30:58.206213 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 06:30:58.206510 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 06:30:58.206813 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 06:30:58.207120 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 06:30:58.207986 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 06:30:58.208301 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 06:30:58.208778 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 06:30:58.209046 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 06:30:58.209507 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 06:30:58.209817 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 06:30:58.219237 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 06:30:58.219572 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 06:30:58.219906 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 06:30:58.220243 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 06:30:58.220613 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 06:30:58.220985 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 06:30:58.221374 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 06:30:58.221744 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 06:30:58.222621 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 06:30:58.222962 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 06:30:58.223750 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 06:30:58.224112 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 06:30:58.224359 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 06:30:58.224559 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 06:30:58.224892 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 06:30:58.225097 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 06:30:58.228797 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 06:30:58.229171 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 06:30:58.229384 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 06:30:58.568632 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 06:30:58.569247 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 06:30:58.515910 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 06:30:58.516133 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 06:30:59.247735 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 06:30:59.779512 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 06:31:00.088617 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 06:31:01.192873 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 06:31:01.193322 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 06:31:01.114039 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 06:31:02.388965 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 06:31:02.389309 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 06:31:04.071778 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 06:31:04.072123 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 06:31:04.253381 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 06:31:04.253873 | ubuntu-noble | Process install dependency map 2026-06-02 06:31:04.254207 | ubuntu-noble | Starting collection install process 2026-06-02 06:31:04.254608 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 06:31:04.254929 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 06:31:04.255287 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 06:31:04.255833 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 06:31:04.256142 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1674q0qkj6za/tmpqdphxd6x/osism-commons-0.20260601.0-_kx2aw6k 2026-06-02 06:31:04.256518 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 06:31:04.256796 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 06:31:03.883885 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 06:31:03.884236 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 06:31:04.051234 | debian-bookworm | Starting galaxy collection install process 2026-06-02 06:31:04.051567 | debian-bookworm | Process install dependency map 2026-06-02 06:31:04.051878 | debian-bookworm | Starting collection install process 2026-06-02 06:31:04.052211 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 06:31:04.052508 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 06:31:04.052813 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 06:31:04.053098 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 06:31:04.053487 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1940v2mglmmm/tmp53a61s3q/osism-commons-0.20260601.0-v6slxuh9 2026-06-02 06:31:04.053777 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 06:31:04.054062 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 06:31:04.132155 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 06:31:04.132453 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 06:31:04.133165 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 06:31:04.317906 | debian-bookworm | ok: Runtime: 0:00:08.634237 2026-06-02 06:31:04.539183 | ubuntu-noble | ok: Runtime: 0:00:08.871924 2026-06-02 06:31:04.553304 | 2026-06-02 06:31:04.553563 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 06:31:04.393066 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 06:31:04.393138 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 06:31:04.393847 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 06:31:05.128743 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:31:05.129994 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:31:05.143746 | 2026-06-02 06:31:05.143932 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 06:31:05.899790 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:05.910970 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:05.759221 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:05.769087 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:06.468832 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:06.469535 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:06.493894 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:06.499901 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 06:31:06.499949 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:06.213589 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:06.214218 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:06.234914 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:06.240447 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 06:31:06.240655 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:07.457460 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 06:31:07.934673 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 06:31:07.773649 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 06:31:07.773708 | debian-bookworm | config file = None 2026-06-02 06:31:07.773724 | debian-bookworm | configured module search path = 2026-06-02 06:31:07.773730 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 06:31:07.773737 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 06:31:07.773742 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 06:31:07.773746 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 06:31:07.773750 | debian-bookworm | jinja version = 3.1.6 2026-06-02 06:31:07.773754 | debian-bookworm | libyaml = True 2026-06-02 06:31:07.773765 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:07.773769 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:07.773772 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:07.773776 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:07.773780 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:07.773784 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 06:31:07.773788 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:07.773791 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:07.773795 | debian-bookworm | 2026-06-02 06:31:07.773903 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:07.773909 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 06:31:07.773913 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:07.773917 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:07.773920 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:07.773924 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:07.773928 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:07.773933 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:07.773936 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:07.773941 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:07.773945 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:07.773949 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:07.773952 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:07.773956 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:07.773960 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:07.773964 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:07.773968 | debian-bookworm | 2026-06-02 06:31:07.774145 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:08.041201 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 06:31:08.396764 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 06:31:08.396849 | ubuntu-noble | config file = None 2026-06-02 06:31:08.396868 | ubuntu-noble | configured module search path = 2026-06-02 06:31:08.396875 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 06:31:08.396880 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 06:31:08.396884 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 06:31:08.396888 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 06:31:08.396892 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 06:31:08.396896 | ubuntu-noble | libyaml = True 2026-06-02 06:31:08.397272 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:08.397320 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:08.397328 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:08.397335 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:08.397340 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:08.397346 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 06:31:08.397352 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:08.397357 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:08.397363 | ubuntu-noble | 2026-06-02 06:31:08.397453 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:08.397464 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 06:31:08.397469 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:08.397474 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:08.397479 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:08.397484 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:08.397490 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:08.397495 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:08.397537 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:08.397544 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:08.397550 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:08.397555 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:08.397560 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:08.397565 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:08.397571 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:08.397576 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:08.397582 | ubuntu-noble | 2026-06-02 06:31:08.397925 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:08.285569 | debian-bookworm | 2026-06-02 06:31:08.286023 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 06:31:08.286475 | debian-bookworm | 2026-06-02 06:31:08.286883 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 06:31:08.746259 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 06:31:09.035567 | ubuntu-noble | 2026-06-02 06:31:09.035623 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 06:31:09.035630 | ubuntu-noble | 2026-06-02 06:31:09.035635 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 06:31:09.350059 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 06:31:09.350194 | debian-bookworm | 2026-06-02 06:31:09.350601 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 06:31:10.370346 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 06:31:10.370458 | ubuntu-noble | 2026-06-02 06:31:10.370632 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 06:31:13.803194 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:13.803429 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.2 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.2 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:13.803564 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:13.803664 | debian-bookworm | 2026-06-02 06:31:13.803774 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 06:31:13.822339 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 06:31:13.822657 | debian-bookworm | 2026-06-02 06:31:13.822981 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 06:31:13.823330 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 06:31:13.823597 | debian-bookworm | 2026-06-02 06:31:13.910351 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 06:31:13.911017 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 06:31:14.202337 | debian-bookworm | ok: Runtime: 0:00:08.532147 2026-06-02 06:31:15.036820 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.0 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.0 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:15.037131 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.1 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.1 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:15.037265 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 06:31:15.037409 | ubuntu-noble | 2026-06-02 06:31:15.038600 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 06:31:15.075562 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 06:31:15.075631 | ubuntu-noble | 2026-06-02 06:31:15.075647 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 06:31:15.075659 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 06:31:15.075669 | ubuntu-noble | 2026-06-02 06:31:15.153065 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 06:31:15.155620 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 06:31:15.271855 | ubuntu-noble | ok: Runtime: 0:00:09.711306 2026-06-02 06:31:15.282976 | 2026-06-02 06:31:15.283139 | TASK [ansible-molecule : Reset connection] 2026-06-02 06:31:15.338490 | 2026-06-02 06:31:15.338789 | TASK [ansible-molecule : Reset connection] 2026-06-02 06:31:15.384879 | 2026-06-02 06:31:15.385060 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 06:31:16.333722 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:16.348755 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:16.236740 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:16.246994 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:16.833963 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:16.834797 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:16.855871 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:16.861601 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 06:31:16.861744 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:16.692709 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:16.693341 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:16.712685 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:16.718274 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 06:31:16.718394 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:17.871746 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 06:31:17.871933 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 06:31:18.110962 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 06:31:18.111756 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 06:31:18.250235 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 06:31:18.250673 | debian-bookworm | config file = None 2026-06-02 06:31:18.251109 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 06:31:18.251588 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 06:31:18.251991 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 06:31:18.252357 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 06:31:18.252705 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 06:31:18.253080 | debian-bookworm | jinja version = 3.1.6 2026-06-02 06:31:18.253453 | debian-bookworm | libyaml = True 2026-06-02 06:31:18.253760 | debian-bookworm | No config file found; using defaults 2026-06-02 06:31:18.254415 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 06:31:18.256889 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 06:31:18.258955 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 06:31:18.259898 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 06:31:18.260353 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 06:31:18.264725 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 06:31:18.265209 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 06:31:18.265654 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 06:31:18.266057 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 06:31:18.266469 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 06:31:18.266842 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 06:31:18.267130 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 06:31:18.267535 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 06:31:18.267815 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 06:31:18.268230 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 06:31:18.269553 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 06:31:18.269884 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 06:31:18.270950 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 06:31:18.271309 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 06:31:18.272034 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 06:31:18.272483 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 06:31:18.272756 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 06:31:18.273031 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 06:31:18.273426 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 06:31:18.273734 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 06:31:18.274082 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 06:31:18.274414 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 06:31:18.274739 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 06:31:18.274944 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 06:31:18.275236 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 06:31:18.275461 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 06:31:18.275739 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 06:31:18.275947 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 06:31:18.276240 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 06:31:18.276512 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 06:31:18.277090 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 06:31:18.277434 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 06:31:18.277700 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 06:31:18.277976 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 06:31:18.278277 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 06:31:18.278589 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 06:31:18.279351 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 06:31:18.279783 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 06:31:18.280110 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 06:31:18.280523 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 06:31:18.280802 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 06:31:18.281092 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 06:31:18.317121 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 06:31:18.317595 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 06:31:18.319617 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 06:31:18.320010 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 06:31:18.320431 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 06:31:18.320800 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 06:31:18.321189 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 06:31:18.321637 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 06:31:18.323787 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 06:31:18.324107 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 06:31:18.325050 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 06:31:18.325444 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 06:31:18.326089 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 06:31:18.326447 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 06:31:18.327145 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 06:31:18.327504 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 06:31:18.327838 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 06:31:18.328198 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 06:31:18.328453 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 06:31:18.328794 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 06:31:18.329124 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 06:31:18.329420 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 06:31:18.329804 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 06:31:18.330065 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 06:31:18.330449 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 06:31:18.330654 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 06:31:18.330927 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 06:31:18.331136 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 06:31:18.331447 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 06:31:18.331652 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 06:31:18.331895 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 06:31:18.332127 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 06:31:18.332373 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 06:31:18.332603 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 06:31:18.332994 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 06:31:18.333268 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 06:31:18.333601 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 06:31:18.333828 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 06:31:18.334231 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 06:31:18.334576 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 06:31:18.334857 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 06:31:18.335137 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 06:31:18.338496 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 06:31:18.338804 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 06:31:18.339134 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 06:31:18.339447 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 06:31:18.340820 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 06:31:18.341127 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 06:31:18.341496 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 06:31:18.341787 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 06:31:18.343369 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 06:31:18.343674 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 06:31:18.344322 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 06:31:18.344617 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 06:31:18.345032 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 06:31:18.345333 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 06:31:18.345650 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 06:31:18.345927 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 06:31:18.346126 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 06:31:18.346407 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 06:31:18.347596 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 06:31:18.347934 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 06:31:18.348491 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 06:31:18.348793 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 06:31:18.349776 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 06:31:18.350053 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 06:31:18.351891 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 06:31:18.352220 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 06:31:18.353012 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 06:31:18.353315 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 06:31:18.354189 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 06:31:18.354484 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 06:31:18.355535 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 06:31:18.355834 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 06:31:18.356493 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 06:31:18.356807 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 06:31:18.358302 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 06:31:18.358655 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 06:31:18.359105 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 06:31:18.359428 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 06:31:18.360090 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 06:31:18.360433 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 06:31:18.360729 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 06:31:18.361010 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 06:31:18.361277 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 06:31:18.361611 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 06:31:18.361922 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 06:31:18.362200 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 06:31:18.362397 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 06:31:18.362671 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 06:31:18.362871 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 06:31:18.363147 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 06:31:18.364320 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 06:31:18.364618 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 06:31:18.364921 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 06:31:18.365212 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 06:31:18.365519 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 06:31:18.365784 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 06:31:18.366291 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 06:31:18.366577 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 06:31:18.366877 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 06:31:18.367191 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 06:31:18.367473 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 06:31:18.367735 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 06:31:18.368110 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 06:31:18.368389 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 06:31:18.371735 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 06:31:18.372041 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 06:31:18.372827 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 06:31:18.373132 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 06:31:18.375124 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 06:31:18.375476 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 06:31:18.376244 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 06:31:18.376568 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 06:31:18.377258 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 06:31:18.377611 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 06:31:18.377890 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 06:31:18.378155 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 06:31:18.378545 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 06:31:18.378821 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 06:31:18.379020 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 06:31:18.379317 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 06:31:18.379589 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 06:31:18.379842 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 06:31:18.380542 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 06:31:18.380822 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 06:31:18.381010 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 06:31:18.381313 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 06:31:18.381787 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 06:31:18.382059 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 06:31:18.382364 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 06:31:18.382885 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 06:31:18.383269 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 06:31:18.383560 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 06:31:18.383793 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 06:31:18.384069 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 06:31:18.392719 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 06:31:18.393064 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 06:31:18.398790 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 06:31:18.399137 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 06:31:18.399557 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 06:31:18.399857 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 06:31:18.401133 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 06:31:18.401538 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 06:31:18.401784 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 06:31:18.402033 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 06:31:18.402434 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 06:31:18.402681 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 06:31:18.402925 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 06:31:18.403187 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 06:31:18.404952 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 06:31:18.405345 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 06:31:18.406151 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 06:31:18.406421 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 06:31:18.407192 | debian-bookworm | Starting galaxy collection install process 2026-06-02 06:31:18.407380 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 06:31:18.490620 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 06:31:18.491237 | ubuntu-noble | config file = None 2026-06-02 06:31:18.491797 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 06:31:18.492199 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 06:31:18.492664 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 06:31:18.493040 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 06:31:18.493455 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 06:31:18.493854 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 06:31:18.494192 | ubuntu-noble | libyaml = True 2026-06-02 06:31:18.494583 | ubuntu-noble | No config file found; using defaults 2026-06-02 06:31:18.495131 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 06:31:18.529666 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 06:31:18.529735 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 06:31:18.530035 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 06:31:18.530581 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 06:31:18.532795 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 06:31:18.533280 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 06:31:18.533862 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 06:31:18.534334 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 06:31:18.535252 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 06:31:18.535765 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 06:31:18.579896 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 06:31:18.582582 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 06:31:18.582646 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 06:31:18.582662 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 06:31:18.582672 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 06:31:18.582964 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 06:31:18.583389 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 06:31:18.583907 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 06:31:18.584255 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 06:31:18.584720 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 06:31:18.585223 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 06:31:18.585611 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 06:31:18.585926 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 06:31:18.586238 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 06:31:18.586668 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 06:31:18.587095 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 06:31:18.587647 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 06:31:18.587985 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 06:31:18.588236 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 06:31:18.588628 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 06:31:18.588882 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 06:31:18.589098 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 06:31:18.589358 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 06:31:18.589726 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 06:31:18.590208 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 06:31:18.590607 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 06:31:18.590985 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 06:31:18.591314 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 06:31:18.592067 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 06:31:18.592423 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 06:31:18.593261 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 06:31:18.593622 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 06:31:18.593999 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 06:31:18.594339 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 06:31:18.596651 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 06:31:18.596958 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 06:31:18.597621 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 06:31:18.597642 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 06:31:18.597862 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 06:31:18.598124 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 06:31:18.598635 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 06:31:18.598853 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 06:31:18.599050 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 06:31:18.599265 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 06:31:18.600585 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 06:31:18.600909 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 06:31:18.601630 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 06:31:18.602052 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 06:31:18.602547 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 06:31:18.602962 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 06:31:18.603657 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 06:31:18.603946 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 06:31:18.604681 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 06:31:18.605010 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 06:31:18.606778 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 06:31:18.607116 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 06:31:18.608178 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 06:31:18.608640 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 06:31:18.608898 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 06:31:18.609312 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 06:31:18.609897 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 06:31:18.610273 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 06:31:18.610718 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 06:31:18.611100 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 06:31:18.613466 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 06:31:18.613787 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 06:31:18.614087 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 06:31:18.614796 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 06:31:18.614815 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 06:31:18.614821 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 06:31:18.615769 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 06:31:18.615786 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 06:31:18.616183 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 06:31:18.616424 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 06:31:18.617108 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 06:31:18.617550 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 06:31:18.618041 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 06:31:18.618285 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 06:31:18.618545 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 06:31:18.619460 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 06:31:18.619475 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 06:31:18.619480 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 06:31:18.619490 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 06:31:18.619741 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 06:31:18.620173 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 06:31:18.620644 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 06:31:18.621069 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 06:31:18.621495 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 06:31:18.621885 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 06:31:18.622244 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 06:31:18.625204 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 06:31:18.625457 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 06:31:18.626277 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 06:31:18.626546 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 06:31:18.626878 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 06:31:18.627066 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 06:31:18.627242 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 06:31:18.627534 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 06:31:18.627759 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 06:31:18.627961 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 06:31:18.628167 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 06:31:18.628377 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 06:31:18.628683 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 06:31:18.628896 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 06:31:18.629088 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 06:31:18.629291 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 06:31:18.629981 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 06:31:18.630181 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 06:31:18.630569 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 06:31:18.630800 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 06:31:18.634283 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 06:31:18.634513 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 06:31:18.634721 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 06:31:18.634927 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 06:31:18.635608 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 06:31:18.635813 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 06:31:18.636094 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 06:31:18.636299 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 06:31:18.636633 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 06:31:18.636892 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 06:31:18.639585 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 06:31:18.639878 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 06:31:18.640213 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 06:31:18.640680 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 06:31:18.640694 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 06:31:18.641047 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 06:31:18.641057 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 06:31:18.641286 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 06:31:18.641711 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 06:31:18.643572 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 06:31:18.643642 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 06:31:18.644360 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 06:31:18.645046 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 06:31:18.645755 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 06:31:18.646326 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 06:31:18.646955 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 06:31:18.647686 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 06:31:18.648369 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 06:31:18.648935 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 06:31:18.651210 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 06:31:18.651244 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 06:31:18.651257 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 06:31:18.651268 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 06:31:18.651280 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 06:31:18.655553 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 06:31:18.655600 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 06:31:18.655613 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 06:31:18.655624 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 06:31:18.655837 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 06:31:18.656149 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 06:31:18.657746 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 06:31:18.658032 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 06:31:18.658287 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 06:31:18.658574 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 06:31:18.659130 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 06:31:18.659433 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 06:31:18.659715 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 06:31:18.659975 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 06:31:18.660174 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 06:31:18.660438 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 06:31:18.660705 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 06:31:18.660962 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 06:31:18.661579 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 06:31:18.661809 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 06:31:18.662493 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 06:31:18.662740 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 06:31:18.663801 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 06:31:18.664044 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 06:31:18.665030 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 06:31:18.665260 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 06:31:18.665497 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 06:31:18.665760 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 06:31:18.665981 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 06:31:18.666204 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 06:31:18.666375 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 06:31:18.666629 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 06:31:18.668405 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 06:31:18.668693 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 06:31:18.670590 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 06:31:18.670844 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 06:31:18.671497 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 06:31:18.671764 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 06:31:18.672015 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 06:31:18.672464 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 06:31:18.672482 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 06:31:18.672721 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 06:31:18.685155 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 06:31:18.686619 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 06:31:18.687825 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 06:31:18.688102 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 06:31:18.688733 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 06:31:18.688946 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 06:31:18.745583 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 06:31:18.745658 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 06:31:18.764095 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 06:31:18.767098 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 06:31:18.777285 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 06:31:18.777470 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 06:31:18.777617 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 06:31:18.786065 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 06:31:18.474348 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 06:31:18.474577 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 06:31:18.491042 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 06:31:18.493412 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 06:31:18.502629 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 06:31:18.502724 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 06:31:18.502812 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 06:31:18.510907 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 06:31:18.825347 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 06:31:18.825436 | debian-bookworm | config file = None 2026-06-02 06:31:18.825444 | debian-bookworm | configured module search path = 2026-06-02 06:31:18.825449 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 06:31:18.825454 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 06:31:18.825459 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 06:31:18.825463 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 06:31:18.825467 | debian-bookworm | jinja version = 3.1.6 2026-06-02 06:31:18.825471 | debian-bookworm | libyaml = True 2026-06-02 06:31:18.825804 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:18.825820 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:18.825824 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:18.825828 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:18.825832 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:18.825836 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 06:31:18.825840 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:18.825844 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:18.825848 | debian-bookworm | 2026-06-02 06:31:18.826034 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:18.826040 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 06:31:18.826044 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:18.826060 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:18.826064 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:18.826068 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:18.826075 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:18.826079 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:18.826083 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:18.826087 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:18.826091 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:18.826096 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:18.826100 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:18.826103 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:18.826107 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:18.826111 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:18.826115 | debian-bookworm | 2026-06-02 06:31:18.826374 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:19.116134 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 06:31:19.116203 | ubuntu-noble | config file = None 2026-06-02 06:31:19.116219 | ubuntu-noble | configured module search path = 2026-06-02 06:31:19.116230 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 06:31:19.116241 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 06:31:19.116251 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 06:31:19.116262 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 06:31:19.116271 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 06:31:19.116282 | ubuntu-noble | libyaml = True 2026-06-02 06:31:19.116837 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:19.116867 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:19.116878 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:19.116888 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:19.116899 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:19.116909 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 06:31:19.116919 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:19.116929 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:19.116943 | ubuntu-noble | 2026-06-02 06:31:19.117243 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:19.117261 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 06:31:19.117272 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:19.117306 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:19.117317 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:19.117343 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:19.117355 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:19.117365 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:19.117375 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:19.117386 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:19.117396 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:19.117427 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:19.117438 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:19.117449 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:19.117459 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:19.117469 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:19.117481 | ubuntu-noble | 2026-06-02 06:31:19.117902 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:19.407464 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 06:31:19.098981 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 06:31:19.325941 | debian-bookworm | 2026-06-02 06:31:19.326363 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 06:31:19.326654 | debian-bookworm | 2026-06-02 06:31:19.326954 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 06:31:19.623064 | ubuntu-noble | 2026-06-02 06:31:19.625596 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 06:31:19.625666 | ubuntu-noble | 2026-06-02 06:31:19.625690 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 06:31:20.409217 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 06:31:20.409316 | debian-bookworm | 2026-06-02 06:31:20.409463 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 06:31:20.435658 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 06:31:20.436129 | debian-bookworm | 2026-06-02 06:31:20.436483 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 06:31:20.793969 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 06:31:20.794182 | ubuntu-noble | 2026-06-02 06:31:20.794351 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 06:31:20.823758 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 06:31:20.824121 | ubuntu-noble | 2026-06-02 06:31:20.824465 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 06:31:20.915618 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 06:31:20.915808 | ubuntu-noble | 2026-06-02 06:31:20.915947 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 06:31:20.475323 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 06:31:20.475580 | debian-bookworm | 2026-06-02 06:31:20.475881 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 06:31:20.504433 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 06:31:20.504628 | debian-bookworm | 2026-06-02 06:31:20.504856 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 06:31:20.945690 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 06:31:20.946932 | ubuntu-noble | 2026-06-02 06:31:20.947122 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 06:31:24.653459 | debian-bookworm | The following additional packages will be installed: 2026-06-02 06:31:24.653552 | debian-bookworm | libauparse0 2026-06-02 06:31:24.653659 | debian-bookworm | Suggested packages: 2026-06-02 06:31:24.653764 | debian-bookworm | audispd-plugins 2026-06-02 06:31:24.653863 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 06:31:24.653959 | debian-bookworm | auditd libauparse0 2026-06-02 06:31:24.654057 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 06:31:24.654836 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780381784, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3669 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3669 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 06:31:24.654871 | debian-bookworm | 2026-06-02 06:31:24.654964 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 06:31:25.205306 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 06:31:25.205576 | ubuntu-noble | libauparse0t64 2026-06-02 06:31:25.205771 | ubuntu-noble | Suggested packages: 2026-06-02 06:31:25.205954 | ubuntu-noble | audispd-plugins 2026-06-02 06:31:25.206153 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 06:31:25.206340 | ubuntu-noble | auditd libauparse0t64 2026-06-02 06:31:25.206576 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 06:31:25.209938 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780381786, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2162 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2162 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 06:31:25.210022 | ubuntu-noble | 2026-06-02 06:31:25.210210 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 06:31:27.504480 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 06:31:27.504563 | debian-bookworm | audispd-plugins 2026-06-02 06:31:27.504591 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 06:31:27.504723 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780381784, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (962 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (962 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 06:31:27.504852 | debian-bookworm | 2026-06-02 06:31:27.505010 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 06:31:28.367324 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 06:31:28.367428 | ubuntu-noble | audispd-plugins 2026-06-02 06:31:28.367560 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 06:31:28.367710 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780381786, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (590 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (590 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 06:31:28.367802 | ubuntu-noble | 2026-06-02 06:31:28.367915 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 06:31:28.677023 | debian-bookworm | --- before 2026-06-02 06:31:28.677123 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2202ubk18hja/tmptqhiykih/auditd.conf.j2 2026-06-02 06:31:28.677139 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 06:31:28.677161 | debian-bookworm | +# 2026-06-02 06:31:28.677272 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 06:31:28.677364 | debian-bookworm | +# 2026-06-02 06:31:28.677492 | debian-bookworm | + 2026-06-02 06:31:28.677590 | debian-bookworm | +local_events = yes 2026-06-02 06:31:28.677689 | debian-bookworm | +write_logs = yes 2026-06-02 06:31:28.677788 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 06:31:28.677883 | debian-bookworm | +log_group = adm 2026-06-02 06:31:28.677977 | debian-bookworm | +log_format = RAW 2026-06-02 06:31:28.678072 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 06:31:28.678181 | debian-bookworm | +freq = 50 2026-06-02 06:31:28.678275 | debian-bookworm | +max_log_file = 8 2026-06-02 06:31:28.678369 | debian-bookworm | +num_logs = 5 2026-06-02 06:31:28.678464 | debian-bookworm | +priority_boost = 4 2026-06-02 06:31:28.678559 | debian-bookworm | +disp_qos = lossy 2026-06-02 06:31:28.678838 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 06:31:28.678953 | debian-bookworm | +name_format = NONE 2026-06-02 06:31:28.679049 | debian-bookworm | +##name = mydomain 2026-06-02 06:31:28.679174 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 06:31:28.679256 | debian-bookworm | +space_left = 12361 2026-06-02 06:31:28.679352 | debian-bookworm | +space_left_action = email 2026-06-02 06:31:28.679447 | debian-bookworm | +verify_email = yes 2026-06-02 06:31:28.679544 | debian-bookworm | +action_mail_acct = root 2026-06-02 06:31:28.679642 | debian-bookworm | +admin_space_left = 50 2026-06-02 06:31:28.679740 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 06:31:28.679841 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 06:31:28.679934 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 06:31:28.680029 | debian-bookworm | +use_libwrap = yes 2026-06-02 06:31:28.680125 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 06:31:28.680251 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 06:31:28.680348 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 06:31:28.680447 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 06:31:28.680543 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 06:31:28.680637 | debian-bookworm | +enable_krb5 = no 2026-06-02 06:31:28.680732 | debian-bookworm | +krb5_principal = auditd 2026-06-02 06:31:28.680830 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 06:31:28.680925 | debian-bookworm | +distribute_network = no 2026-06-02 06:31:28.681014 | debian-bookworm | 2026-06-02 06:31:28.681126 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780381887.5327194-2573-276691336989188/.source.conf", "state": "file", "uid": 0} 2026-06-02 06:31:28.681225 | debian-bookworm | 2026-06-02 06:31:28.681329 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 06:31:29.067121 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 06:31:29.067206 | debian-bookworm | 2026-06-02 06:31:29.067216 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 06:31:29.574726 | ubuntu-noble | --- before 2026-06-02 06:31:29.574992 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-19444gke445h/tmpxdfh_19s/auditd.conf.j2 2026-06-02 06:31:29.575219 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 06:31:29.575474 | ubuntu-noble | +# 2026-06-02 06:31:29.577991 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 06:31:29.578013 | ubuntu-noble | +# 2026-06-02 06:31:29.578017 | ubuntu-noble | + 2026-06-02 06:31:29.578021 | ubuntu-noble | +local_events = yes 2026-06-02 06:31:29.578025 | ubuntu-noble | +write_logs = yes 2026-06-02 06:31:29.578028 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 06:31:29.578033 | ubuntu-noble | +log_group = adm 2026-06-02 06:31:29.578036 | ubuntu-noble | +log_format = RAW 2026-06-02 06:31:29.578040 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 06:31:29.578043 | ubuntu-noble | +freq = 50 2026-06-02 06:31:29.578047 | ubuntu-noble | +max_log_file = 8 2026-06-02 06:31:29.578051 | ubuntu-noble | +num_logs = 5 2026-06-02 06:31:29.578121 | ubuntu-noble | +priority_boost = 4 2026-06-02 06:31:29.578320 | ubuntu-noble | +disp_qos = lossy 2026-06-02 06:31:29.578582 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 06:31:29.578752 | ubuntu-noble | +name_format = NONE 2026-06-02 06:31:29.578915 | ubuntu-noble | +##name = mydomain 2026-06-02 06:31:29.579090 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 06:31:29.579263 | ubuntu-noble | +space_left = 12361 2026-06-02 06:31:29.579447 | ubuntu-noble | +space_left_action = email 2026-06-02 06:31:29.579633 | ubuntu-noble | +verify_email = yes 2026-06-02 06:31:29.579800 | ubuntu-noble | +action_mail_acct = root 2026-06-02 06:31:29.580007 | ubuntu-noble | +admin_space_left = 50 2026-06-02 06:31:29.580187 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 06:31:29.580361 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 06:31:29.580576 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 06:31:29.580745 | ubuntu-noble | +use_libwrap = yes 2026-06-02 06:31:29.580916 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 06:31:29.581089 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 06:31:29.581256 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 06:31:29.581444 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 06:31:29.581634 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 06:31:29.581796 | ubuntu-noble | +enable_krb5 = no 2026-06-02 06:31:29.581966 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 06:31:29.582137 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 06:31:29.582307 | ubuntu-noble | +distribute_network = no 2026-06-02 06:31:29.582481 | ubuntu-noble | 2026-06-02 06:31:29.582714 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780381888.3820124-2342-175849005288770/.source.conf", "state": "file", "uid": 0} 2026-06-02 06:31:29.583128 | ubuntu-noble | 2026-06-02 06:31:29.583338 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 06:31:29.891359 | debian-bookworm | --- before 2026-06-02 06:31:29.891729 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2202ubk18hja/tmpk1chmk5u/20-neo23x0.rules.j2 2026-06-02 06:31:29.892038 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 06:31:29.892360 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 06:31:29.892473 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 06:31:29.892700 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 06:31:29.892878 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 06:31:29.893072 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 06:31:29.893278 | debian-bookworm | +# 2026-06-02 06:31:29.893508 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 06:31:29.893706 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 06:31:29.893904 | debian-bookworm | +# 2026-06-02 06:31:29.894101 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 06:31:29.894375 | debian-bookworm | +# 2026-06-02 06:31:29.894624 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 06:31:29.894763 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 06:31:29.895011 | debian-bookworm | +# 2026-06-02 06:31:29.895084 | debian-bookworm | +# Based on rules published here: 2026-06-02 06:31:29.895276 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 06:31:29.895685 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 06:31:29.895951 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 06:31:29.896237 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 06:31:29.896476 | debian-bookworm | +# Linux audit repo 2026-06-02 06:31:29.896735 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 06:31:29.896978 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 06:31:29.897270 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 06:31:29.899266 | debian-bookworm | +# 2026-06-02 06:31:29.899594 | debian-bookworm | +# Further rules 2026-06-02 06:31:29.899863 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 06:31:29.900111 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 06:31:29.900351 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 06:31:29.900577 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 06:31:29.900736 | debian-bookworm | + 2026-06-02 06:31:29.900900 | debian-bookworm | +# Remove any existing rules 2026-06-02 06:31:29.901056 | debian-bookworm | +-D 2026-06-02 06:31:29.901228 | debian-bookworm | + 2026-06-02 06:31:29.901385 | debian-bookworm | +# Buffer Size 2026-06-02 06:31:29.901581 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 06:31:29.901739 | debian-bookworm | +-b 8192 2026-06-02 06:31:29.901891 | debian-bookworm | + 2026-06-02 06:31:29.902050 | debian-bookworm | +# Failure Mode 2026-06-02 06:31:29.902232 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 06:31:29.902391 | debian-bookworm | +-f 1 2026-06-02 06:31:29.902543 | debian-bookworm | + 2026-06-02 06:31:29.902698 | debian-bookworm | +# Ignore errors 2026-06-02 06:31:29.902858 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 06:31:29.903014 | debian-bookworm | +-i 2026-06-02 06:31:29.903222 | debian-bookworm | + 2026-06-02 06:31:29.903391 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 06:31:29.903546 | debian-bookworm | + 2026-06-02 06:31:29.903698 | debian-bookworm | +## Audit the audit logs 2026-06-02 06:31:29.903840 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 06:31:29.903983 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 06:31:29.904125 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 06:31:29.904275 | debian-bookworm | + 2026-06-02 06:31:29.904417 | debian-bookworm | +## Auditd configuration 2026-06-02 06:31:29.904559 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 06:31:29.904700 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 06:31:29.904839 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 06:31:29.904978 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 06:31:29.905111 | debian-bookworm | + 2026-06-02 06:31:29.905265 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 06:31:29.905435 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 06:31:29.905588 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 06:31:29.905786 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 06:31:29.905938 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 06:31:29.906073 | debian-bookworm | + 2026-06-02 06:31:29.906233 | debian-bookworm | +## Access to all audit trails 2026-06-02 06:31:29.906371 | debian-bookworm | + 2026-06-02 06:31:29.906514 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 06:31:29.906656 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 06:31:29.906796 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 06:31:29.906936 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 06:31:29.907075 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 06:31:29.907259 | debian-bookworm | + 2026-06-02 06:31:29.907405 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 06:31:29.907539 | debian-bookworm | + 2026-06-02 06:31:29.907685 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 06:31:29.907828 | debian-bookworm | + 2026-06-02 06:31:29.907976 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 06:31:29.908112 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 06:31:29.908284 | debian-bookworm | + 2026-06-02 06:31:29.908418 | debian-bookworm | +## Ignore current working directory records 2026-06-02 06:31:29.908553 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 06:31:29.908682 | debian-bookworm | + 2026-06-02 06:31:29.908818 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 06:31:29.908951 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 06:31:29.909083 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 06:31:29.909259 | debian-bookworm | + 2026-06-02 06:31:29.909426 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 06:31:29.909568 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 06:31:29.909694 | debian-bookworm | + 2026-06-02 06:31:29.909819 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 06:31:29.909946 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 06:31:29.910062 | debian-bookworm | + 2026-06-02 06:31:29.910196 | debian-bookworm | +## Open VM Tools 2026-06-02 06:31:29.910322 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 06:31:29.910441 | debian-bookworm | + 2026-06-02 06:31:29.910565 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 06:31:29.910686 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 06:31:29.910809 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 06:31:29.910925 | debian-bookworm | + 2026-06-02 06:31:29.911042 | debian-bookworm | +## FileBeat 2026-06-02 06:31:29.911174 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 06:31:29.911292 | debian-bookworm | + 2026-06-02 06:31:29.911412 | debian-bookworm | +## More information on how to filter events 2026-06-02 06:31:29.911532 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 06:31:29.911649 | debian-bookworm | + 2026-06-02 06:31:29.911766 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 06:31:29.911883 | debian-bookworm | + 2026-06-02 06:31:29.912002 | debian-bookworm | +## Kernel parameters 2026-06-02 06:31:29.912122 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 06:31:29.912276 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 06:31:29.912382 | debian-bookworm | + 2026-06-02 06:31:29.912491 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 06:31:29.912600 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 06:31:29.912712 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 06:31:29.912821 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 06:31:29.912930 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 06:31:29.913036 | debian-bookworm | + 2026-06-02 06:31:29.913143 | debian-bookworm | +## Modprobe configuration 2026-06-02 06:31:29.913268 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 06:31:29.913376 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 06:31:29.913524 | debian-bookworm | + 2026-06-02 06:31:29.913637 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 06:31:29.913748 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 06:31:29.913855 | debian-bookworm | + 2026-06-02 06:31:29.913965 | debian-bookworm | +## Special files 2026-06-02 06:31:29.914076 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 06:31:29.914197 | debian-bookworm | + 2026-06-02 06:31:29.914308 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 06:31:29.914421 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 06:31:29.914526 | debian-bookworm | + 2026-06-02 06:31:29.914637 | debian-bookworm | +### NFS mount 2026-06-02 06:31:29.914759 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.914880 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.914987 | debian-bookworm | + 2026-06-02 06:31:29.915097 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 06:31:29.915248 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 06:31:29.915370 | debian-bookworm | + 2026-06-02 06:31:29.915479 | debian-bookworm | +## Time 2026-06-02 06:31:29.915590 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 06:31:29.915698 | debian-bookworm | +### Local time zone 2026-06-02 06:31:29.915805 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 06:31:29.915910 | debian-bookworm | + 2026-06-02 06:31:29.916020 | debian-bookworm | +## Stunnel 2026-06-02 06:31:29.916129 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 06:31:29.916256 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 06:31:29.916363 | debian-bookworm | + 2026-06-02 06:31:29.916474 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 06:31:29.916581 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 06:31:29.916690 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 06:31:29.916799 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 06:31:29.916908 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 06:31:29.917017 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 06:31:29.917128 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 06:31:29.917272 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 06:31:29.917385 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 06:31:29.917523 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 06:31:29.917629 | debian-bookworm | + 2026-06-02 06:31:29.917736 | debian-bookworm | +## User, group, password databases 2026-06-02 06:31:29.917843 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 06:31:29.917949 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 06:31:29.918057 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 06:31:29.918178 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 06:31:29.918289 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 06:31:29.918396 | debian-bookworm | + 2026-06-02 06:31:29.918506 | debian-bookworm | +## Sudoers file changes 2026-06-02 06:31:29.918614 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 06:31:29.918723 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 06:31:29.918829 | debian-bookworm | + 2026-06-02 06:31:29.918936 | debian-bookworm | +## Passwd 2026-06-02 06:31:29.919046 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 06:31:29.919165 | debian-bookworm | + 2026-06-02 06:31:29.919276 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 06:31:29.919386 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 06:31:29.919498 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 06:31:29.919607 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 06:31:29.919718 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 06:31:29.919828 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 06:31:29.919936 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 06:31:29.920047 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 06:31:29.920184 | debian-bookworm | + 2026-06-02 06:31:29.920304 | debian-bookworm | +## Login configuration and information 2026-06-02 06:31:29.920416 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 06:31:29.920525 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 06:31:29.920632 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 06:31:29.920741 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 06:31:29.920847 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 06:31:29.920955 | debian-bookworm | + 2026-06-02 06:31:29.921063 | debian-bookworm | +## Network Environment 2026-06-02 06:31:29.921182 | debian-bookworm | +### Changes to hostname 2026-06-02 06:31:29.921294 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 06:31:29.921418 | debian-bookworm | + 2026-06-02 06:31:29.921529 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 06:31:29.921638 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 06:31:29.921748 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 06:31:29.921853 | debian-bookworm | + 2026-06-02 06:31:29.921962 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 06:31:29.922073 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 06:31:29.922190 | debian-bookworm | + 2026-06-02 06:31:29.922299 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 06:31:29.922408 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 06:31:29.922513 | debian-bookworm | + 2026-06-02 06:31:29.922631 | debian-bookworm | +### Changes to other files 2026-06-02 06:31:29.922742 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 06:31:29.922851 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 06:31:29.922960 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 06:31:29.923069 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 06:31:29.923216 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 06:31:29.923328 | debian-bookworm | + 2026-06-02 06:31:29.923438 | debian-bookworm | +### Changes to issue 2026-06-02 06:31:29.923548 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 06:31:29.923662 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 06:31:29.923769 | debian-bookworm | + 2026-06-02 06:31:29.923879 | debian-bookworm | +## System startup scripts 2026-06-02 06:31:29.923990 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 06:31:29.924101 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 06:31:29.924225 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 06:31:29.924334 | debian-bookworm | + 2026-06-02 06:31:29.924442 | debian-bookworm | +## Library search paths 2026-06-02 06:31:29.924550 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 06:31:29.924661 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 06:31:29.924767 | debian-bookworm | + 2026-06-02 06:31:29.924877 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 06:31:29.924986 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 06:31:29.925092 | debian-bookworm | + 2026-06-02 06:31:29.925213 | debian-bookworm | +## Pam configuration 2026-06-02 06:31:29.925334 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 06:31:29.925529 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 06:31:29.925649 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 06:31:29.925761 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 06:31:29.925874 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 06:31:29.925981 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 06:31:29.926090 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 06:31:29.926212 | debian-bookworm | + 2026-06-02 06:31:29.926321 | debian-bookworm | +## Mail configuration 2026-06-02 06:31:29.926431 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 06:31:29.926541 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 06:31:29.926648 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 06:31:29.926754 | debian-bookworm | + 2026-06-02 06:31:29.926863 | debian-bookworm | +## SSH configuration 2026-06-02 06:31:29.926975 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 06:31:29.927085 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 06:31:29.927226 | debian-bookworm | + 2026-06-02 06:31:29.927339 | debian-bookworm | +## root ssh key tampering 2026-06-02 06:31:29.927447 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 06:31:29.927554 | debian-bookworm | + 2026-06-02 06:31:29.927664 | debian-bookworm | +# Systemd 2026-06-02 06:31:29.927774 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 06:31:29.927884 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 06:31:29.927992 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 06:31:29.928096 | debian-bookworm | + 2026-06-02 06:31:29.928246 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 06:31:29.928358 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:29.928469 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:29.928581 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 06:31:29.928688 | debian-bookworm | + 2026-06-02 06:31:29.928800 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 06:31:29.928910 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 06:31:29.929020 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:29.929126 | debian-bookworm | + 2026-06-02 06:31:29.929251 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 06:31:29.929360 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 06:31:29.929486 | debian-bookworm | + 2026-06-02 06:31:29.929599 | debian-bookworm | +## Critical elements access failures 2026-06-02 06:31:29.929714 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.929826 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.929937 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930056 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930201 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930341 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930462 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930576 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 06:31:29.930682 | debian-bookworm | + 2026-06-02 06:31:29.930792 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 06:31:29.930900 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 06:31:29.931011 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 06:31:29.931116 | debian-bookworm | + 2026-06-02 06:31:29.931241 | debian-bookworm | +## Power state 2026-06-02 06:31:29.931350 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 06:31:29.931456 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 06:31:29.931565 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 06:31:29.931672 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 06:31:29.931779 | debian-bookworm | + 2026-06-02 06:31:29.931886 | debian-bookworm | +## Session initiation information 2026-06-02 06:31:29.931995 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 06:31:29.932104 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 06:31:29.932225 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 06:31:29.932332 | debian-bookworm | + 2026-06-02 06:31:29.932442 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 06:31:29.932553 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.932662 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.932772 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.932881 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933042 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933248 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933462 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933638 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933808 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.933978 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.934199 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.934385 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.934553 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:29.934800 | debian-bookworm | + 2026-06-02 06:31:29.934951 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 06:31:29.935082 | debian-bookworm | + 2026-06-02 06:31:29.935239 | debian-bookworm | +## Reconnaissance 2026-06-02 06:31:29.935391 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 06:31:29.935529 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 06:31:29.935664 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 06:31:29.935804 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 06:31:29.935938 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 06:31:29.936074 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 06:31:29.936224 | debian-bookworm | + 2026-06-02 06:31:29.936365 | debian-bookworm | +## Suspicious activity 2026-06-02 06:31:29.936502 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 06:31:29.936641 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 06:31:29.936797 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 06:31:29.936946 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 06:31:29.937085 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 06:31:29.937246 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 06:31:29.937387 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 06:31:29.937591 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 06:31:29.937745 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 06:31:29.937907 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 06:31:29.938067 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 06:31:29.938270 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 06:31:29.938432 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 06:31:29.938585 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 06:31:29.938727 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 06:31:29.938878 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 06:31:29.939033 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 06:31:29.939213 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 06:31:29.939381 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 06:31:29.939531 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 06:31:29.939686 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 06:31:29.939830 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 06:31:29.939963 | debian-bookworm | + 2026-06-02 06:31:29.940096 | debian-bookworm | +## sssd 2026-06-02 06:31:29.940284 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.940444 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.940563 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.940677 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.940809 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.940934 | debian-bookworm | + 2026-06-02 06:31:29.941058 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 06:31:29.941189 | debian-bookworm | + 2026-06-02 06:31:29.941304 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 06:31:29.941442 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 06:31:29.941557 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 06:31:29.941666 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 06:31:29.941771 | debian-bookworm | + 2026-06-02 06:31:29.941880 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 06:31:29.941990 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 06:31:29.942094 | debian-bookworm | + 2026-06-02 06:31:29.942219 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 06:31:29.942328 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 06:31:29.942434 | debian-bookworm | + 2026-06-02 06:31:29.942542 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 06:31:29.942649 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 06:31:29.942754 | debian-bookworm | + 2026-06-02 06:31:29.942862 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 06:31:29.942969 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 06:31:29.943072 | debian-bookworm | + 2026-06-02 06:31:29.943213 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 06:31:29.943329 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 06:31:29.943436 | debian-bookworm | + 2026-06-02 06:31:29.943544 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 06:31:29.943653 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 06:31:29.943758 | debian-bookworm | + 2026-06-02 06:31:29.943867 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 06:31:29.943975 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 06:31:29.944081 | debian-bookworm | + 2026-06-02 06:31:29.944214 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 06:31:29.944325 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 06:31:29.944434 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 06:31:29.944545 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 06:31:29.944650 | debian-bookworm | + 2026-06-02 06:31:29.944759 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 06:31:29.944866 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 06:31:29.944983 | debian-bookworm | + 2026-06-02 06:31:29.945092 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 06:31:29.945263 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 06:31:29.945517 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 06:31:29.945632 | debian-bookworm | + 2026-06-02 06:31:29.945743 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 06:31:29.945852 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 06:31:29.945963 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 06:31:29.946071 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 06:31:29.946196 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 06:31:29.946306 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 06:31:29.946419 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 06:31:29.946526 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 06:31:29.946632 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 06:31:29.946739 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 06:31:29.946849 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 06:31:29.946954 | debian-bookworm | + 2026-06-02 06:31:29.947060 | debian-bookworm | +### kde4 2026-06-02 06:31:29.947207 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.947328 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:29.947432 | debian-bookworm | + 2026-06-02 06:31:29.947541 | debian-bookworm | +## dbus-send invocation 2026-06-02 06:31:29.947653 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 06:31:29.947761 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 06:31:29.947871 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 06:31:29.947976 | debian-bookworm | + 2026-06-02 06:31:29.948082 | debian-bookworm | +## pkexec invocation 2026-06-02 06:31:29.948211 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 06:31:29.948321 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 06:31:29.948427 | debian-bookworm | + 2026-06-02 06:31:29.948536 | debian-bookworm | +## Suspicious shells 2026-06-02 06:31:29.948644 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 06:31:29.948750 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 06:31:29.948859 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 06:31:29.948967 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 06:31:29.949073 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 06:31:29.949224 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 06:31:29.949341 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 06:31:29.949469 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 06:31:29.949582 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 06:31:29.949688 | debian-bookworm | + 2026-06-02 06:31:29.949794 | debian-bookworm | +# Web Server Actvity 2026-06-02 06:31:29.949903 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 06:31:29.950014 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 06:31:29.950121 | debian-bookworm | + 2026-06-02 06:31:29.950248 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 06:31:29.950356 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 06:31:29.950464 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 06:31:29.950573 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 06:31:29.950679 | debian-bookworm | + 2026-06-02 06:31:29.950787 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 06:31:29.950894 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 06:31:29.951002 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 06:31:29.951107 | debian-bookworm | + 2026-06-02 06:31:30.015128 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 06:31:30.015212 | ubuntu-noble | 2026-06-02 06:31:30.016578 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 06:31:29.951423 | debian-bookworm | +## Shell/profile configurations 2026-06-02 06:31:29.951583 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 06:31:29.951698 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 06:31:29.951806 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 06:31:29.951915 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 06:31:29.952023 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 06:31:29.952134 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 06:31:29.952260 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 06:31:29.952368 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 06:31:29.952486 | debian-bookworm | + 2026-06-02 06:31:29.952595 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 06:31:29.952714 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 06:31:29.952823 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 06:31:29.952932 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 06:31:29.953036 | debian-bookworm | + 2026-06-02 06:31:29.953142 | debian-bookworm | +## Injection 2026-06-02 06:31:29.953311 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 06:31:29.953445 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 06:31:29.953560 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 06:31:29.953667 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 06:31:29.953777 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 06:31:29.953887 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 06:31:29.953994 | debian-bookworm | + 2026-06-02 06:31:29.954103 | debian-bookworm | +## Anonymous File Creation 2026-06-02 06:31:29.954275 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 06:31:29.954389 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 06:31:29.954509 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 06:31:29.954622 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 06:31:29.954729 | debian-bookworm | + 2026-06-02 06:31:29.954837 | debian-bookworm | +## Privilege Abuse 2026-06-02 06:31:29.954948 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 06:31:29.955061 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 06:31:29.955183 | debian-bookworm | + 2026-06-02 06:31:29.955292 | debian-bookworm | +# Socket Creations 2026-06-02 06:31:29.955403 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 06:31:29.955510 | debian-bookworm | + 2026-06-02 06:31:29.955620 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 06:31:29.955729 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 06:31:29.955834 | debian-bookworm | + 2026-06-02 06:31:29.955945 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 06:31:29.956056 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 06:31:29.956200 | debian-bookworm | + 2026-06-02 06:31:29.956317 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 06:31:29.956424 | debian-bookworm | + 2026-06-02 06:31:29.956533 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 06:31:29.956644 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 06:31:29.956753 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 06:31:29.956859 | debian-bookworm | + 2026-06-02 06:31:29.956970 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 06:31:29.957078 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 06:31:29.957211 | debian-bookworm | + 2026-06-02 06:31:29.957326 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 06:31:29.957457 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 06:31:29.957569 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 06:31:29.957679 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 06:31:29.957787 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 06:31:29.957891 | debian-bookworm | + 2026-06-02 06:31:29.957999 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 06:31:29.958108 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 06:31:29.958248 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 06:31:29.958363 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 06:31:29.958472 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 06:31:29.958582 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 06:31:29.958690 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 06:31:29.958798 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 06:31:29.958903 | debian-bookworm | + 2026-06-02 06:31:29.959012 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 06:31:29.959121 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959245 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959367 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959476 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959584 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959694 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 06:31:29.959802 | debian-bookworm | + 2026-06-02 06:31:29.959911 | debian-bookworm | +# npm 2026-06-02 06:31:29.960021 | debian-bookworm | +## T1072 third party software 2026-06-02 06:31:29.960130 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 06:31:29.960259 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 06:31:29.960374 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 06:31:29.960479 | debian-bookworm | + 2026-06-02 06:31:29.960588 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 06:31:29.960697 | debian-bookworm | +## T1072 third party software 2026-06-02 06:31:29.960804 | debian-bookworm | +## https://www.cpan.org 2026-06-02 06:31:29.960914 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 06:31:29.961019 | debian-bookworm | + 2026-06-02 06:31:29.961128 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 06:31:29.961282 | debian-bookworm | +## T1072 third party software 2026-06-02 06:31:29.961414 | debian-bookworm | +## https://rubygems.org 2026-06-02 06:31:29.961530 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 06:31:29.961640 | debian-bookworm | + 2026-06-02 06:31:29.961750 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 06:31:29.961858 | debian-bookworm | +## T1072 third party software 2026-06-02 06:31:29.961966 | debian-bookworm | +## https://luarocks.org 2026-06-02 06:31:29.962080 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 06:31:29.962207 | debian-bookworm | + 2026-06-02 06:31:29.962320 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 06:31:29.962434 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 06:31:29.962543 | debian-bookworm | +## T1072 third party software 2026-06-02 06:31:29.962654 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 06:31:29.962764 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 06:31:29.962869 | debian-bookworm | + 2026-06-02 06:31:29.962978 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 06:31:29.963085 | debian-bookworm | + 2026-06-02 06:31:29.963210 | debian-bookworm | +## GDS specific secrets 2026-06-02 06:31:29.963321 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 06:31:29.963427 | debian-bookworm | + 2026-06-02 06:31:29.963534 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 06:31:29.963647 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 06:31:29.963757 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 06:31:29.963861 | debian-bookworm | + 2026-06-02 06:31:29.963972 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 06:31:29.964081 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 06:31:29.964221 | debian-bookworm | + 2026-06-02 06:31:29.964333 | debian-bookworm | +## Salt 2026-06-02 06:31:29.964441 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 06:31:29.964553 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 06:31:29.964915 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 06:31:29.965038 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 06:31:29.965167 | debian-bookworm | + 2026-06-02 06:31:29.965295 | debian-bookworm | +## Otter 2026-06-02 06:31:29.965426 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 06:31:29.965540 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 06:31:29.965647 | debian-bookworm | + 2026-06-02 06:31:29.965757 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 06:31:29.965866 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 06:31:29.965977 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 06:31:29.966088 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 06:31:29.966218 | debian-bookworm | +### macOS 2026-06-02 06:31:29.966331 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 06:31:29.966440 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 06:31:29.966548 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 06:31:29.966652 | debian-bookworm | + 2026-06-02 06:31:29.966761 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 06:31:29.966871 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 06:31:29.966980 | debian-bookworm | +### macOS 2026-06-02 06:31:29.967089 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 06:31:29.967224 | debian-bookworm | + 2026-06-02 06:31:29.967338 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 06:31:29.967447 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 06:31:29.967554 | debian-bookworm | +### macOS 2026-06-02 06:31:29.967663 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 06:31:29.967767 | debian-bookworm | + 2026-06-02 06:31:29.967876 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 06:31:29.967980 | debian-bookworm | + 2026-06-02 06:31:29.968088 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 06:31:29.968231 | debian-bookworm | +### macOS 2026-06-02 06:31:29.968342 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 06:31:29.968448 | debian-bookworm | + 2026-06-02 06:31:29.968558 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 06:31:29.968667 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 06:31:29.968772 | debian-bookworm | +### macOS 2026-06-02 06:31:29.968879 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 06:31:29.968982 | debian-bookworm | + 2026-06-02 06:31:29.969091 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 06:31:29.969217 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 06:31:29.969325 | debian-bookworm | +### macOS 2026-06-02 06:31:29.969468 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 06:31:29.969578 | debian-bookworm | + 2026-06-02 06:31:29.969691 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 06:31:29.969800 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 06:31:29.969906 | debian-bookworm | +### macOS 2026-06-02 06:31:29.970014 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 06:31:29.970119 | debian-bookworm | + 2026-06-02 06:31:29.970240 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 06:31:29.970348 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 06:31:29.970454 | debian-bookworm | +### macOS 2026-06-02 06:31:29.970563 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 06:31:29.970670 | debian-bookworm | + 2026-06-02 06:31:29.970780 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 06:31:29.970890 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 06:31:29.970997 | debian-bookworm | +### macOS 2026-06-02 06:31:29.971108 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 06:31:29.971243 | debian-bookworm | + 2026-06-02 06:31:29.971355 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 06:31:29.971462 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 06:31:29.971569 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 06:31:29.971679 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 06:31:29.971786 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 06:31:29.971894 | debian-bookworm | +### macOS 2026-06-02 06:31:29.972003 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 06:31:29.972109 | debian-bookworm | + 2026-06-02 06:31:29.972227 | debian-bookworm | +## Docker 2026-06-02 06:31:29.972334 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 06:31:29.972441 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 06:31:29.972548 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 06:31:29.972657 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 06:31:29.972768 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 06:31:29.972875 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 06:31:29.972983 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 06:31:29.973090 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 06:31:29.973259 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 06:31:29.973372 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 06:31:29.973499 | debian-bookworm | + 2026-06-02 06:31:29.973609 | debian-bookworm | +## Virtualization stuff 2026-06-02 06:31:29.973720 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 06:31:29.973829 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 06:31:29.973935 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 06:31:29.974043 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 06:31:29.974164 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 06:31:29.974275 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 06:31:29.974383 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 06:31:29.974489 | debian-bookworm | + 2026-06-02 06:31:29.974657 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 06:31:29.974767 | debian-bookworm | + 2026-06-02 06:31:29.974877 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 06:31:29.974997 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 06:31:29.975108 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 06:31:29.975247 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 06:31:29.975359 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 06:31:29.975468 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 06:31:29.975578 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 06:31:29.975685 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 06:31:29.975795 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 06:31:29.975903 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 06:31:29.976012 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 06:31:29.976123 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 06:31:29.976251 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 06:31:29.976363 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 06:31:29.976474 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 06:31:29.976584 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 06:31:29.976692 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 06:31:29.976798 | debian-bookworm | + 2026-06-02 06:31:29.976907 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 06:31:29.977013 | debian-bookworm | + 2026-06-02 06:31:29.977122 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 06:31:29.977245 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 06:31:29.977354 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 06:31:29.977956 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 06:31:29.978086 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 06:31:29.978214 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 06:31:29.978325 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 06:31:29.978434 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 06:31:29.978540 | debian-bookworm | + 2026-06-02 06:31:29.978647 | debian-bookworm | +### qemu on macOS 2026-06-02 06:31:29.978753 | debian-bookworm | + 2026-06-02 06:31:29.978862 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 06:31:29.978972 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 06:31:29.979086 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 06:31:29.979232 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 06:31:29.979347 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 06:31:29.979454 | debian-bookworm | + 2026-06-02 06:31:29.979561 | debian-bookworm | +## Kubelet 2026-06-02 06:31:29.979668 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 06:31:29.979773 | debian-bookworm | + 2026-06-02 06:31:29.979882 | debian-bookworm | +# ipc system call 2026-06-02 06:31:29.979993 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 06:31:29.980100 | debian-bookworm | + 2026-06-02 06:31:29.980229 | debian-bookworm | +## msgctl 2026-06-02 06:31:29.980362 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 06:31:29.980471 | debian-bookworm | +## msgget 2026-06-02 06:31:29.980584 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 06:31:29.980694 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:29.980806 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 06:31:29.980917 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 06:31:29.981024 | debian-bookworm | + 2026-06-02 06:31:29.981129 | debian-bookworm | +## semctl 2026-06-02 06:31:29.981257 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 06:31:29.981364 | debian-bookworm | +## semget 2026-06-02 06:31:29.981511 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 06:31:29.981620 | debian-bookworm | +## semop 2026-06-02 06:31:29.981730 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 06:31:29.981837 | debian-bookworm | +## semtimedop 2026-06-02 06:31:29.981944 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 06:31:29.982052 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:29.982203 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 06:31:29.982319 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 06:31:29.982430 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 06:31:29.982540 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 06:31:29.982643 | debian-bookworm | + 2026-06-02 06:31:29.982749 | debian-bookworm | +## shmctl 2026-06-02 06:31:29.982858 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 06:31:29.982963 | debian-bookworm | +## shmget 2026-06-02 06:31:29.983071 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 06:31:29.983195 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:29.983306 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 06:31:29.983414 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 06:31:29.983525 | debian-bookworm | + 2026-06-02 06:31:29.983635 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 06:31:29.983739 | debian-bookworm | + 2026-06-02 06:31:29.983847 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 06:31:29.983954 | debian-bookworm | + 2026-06-02 06:31:29.984062 | debian-bookworm | +## Common Shells 2026-06-02 06:31:29.984186 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 06:31:29.984298 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 06:31:29.984409 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 06:31:29.984518 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 06:31:29.984628 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 06:31:29.984738 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 06:31:29.984846 | debian-bookworm | + 2026-06-02 06:31:29.984960 | debian-bookworm | +## Root command executions 2026-06-02 06:31:29.985072 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 06:31:29.985197 | debian-bookworm | + 2026-06-02 06:31:29.985310 | debian-bookworm | +## File Deletion Events by User 2026-06-02 06:31:29.985453 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 06:31:29.985561 | debian-bookworm | + 2026-06-02 06:31:29.985669 | debian-bookworm | +## File Access 2026-06-02 06:31:29.985781 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 06:31:29.985896 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 06:31:29.986011 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 06:31:29.986116 | debian-bookworm | + 2026-06-02 06:31:29.986263 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 06:31:29.986376 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 06:31:29.986486 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 06:31:29.986591 | debian-bookworm | + 2026-06-02 06:31:29.986698 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 06:31:29.986809 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 06:31:29.986922 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 06:31:29.987030 | debian-bookworm | + 2026-06-02 06:31:29.987136 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 06:31:29.987266 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 06:31:29.987378 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 06:31:29.987486 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 06:31:29.987593 | debian-bookworm | +### bit API. 2026-06-02 06:31:29.987703 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 06:31:29.987808 | debian-bookworm | + 2026-06-02 06:31:29.987917 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 06:31:29.988031 | debian-bookworm | + 2026-06-02 06:31:29.988139 | debian-bookworm | +##-e 2 2026-06-02 06:31:29.988258 | debian-bookworm | 2026-06-02 06:31:29.988516 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780381889.0961282-2651-1964945685247/.source.rules", "state": "file", "uid": 0} 2026-06-02 06:31:29.988633 | debian-bookworm | 2026-06-02 06:31:29.988746 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 06:31:30.932648 | ubuntu-noble | --- before 2026-06-02 06:31:30.933351 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-19444gke445h/tmpg93cf500/20-neo23x0.rules.j2 2026-06-02 06:31:30.933378 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 06:31:30.933478 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 06:31:30.933741 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 06:31:30.933953 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 06:31:30.934154 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 06:31:30.934375 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 06:31:30.710051 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ActiveEnterTimestampMonotonic": "1104966989", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:23 UTC", "AssertTimestampMonotonic": "1104898057", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "53366000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ConditionTimestampMonotonic": "1104898018", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2423", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ExecMainStartTimestampMonotonic": "1104938648", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2422 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2422 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2426 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2426 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:23 UTC", "InactiveExitTimestampMonotonic": "1104916823", "InvocationID": "14cd62e2b81049b682c3955f56428370", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2423", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "708608", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 06:31:23 UTC", "StateChangeTimestampMonotonic": "1104966989", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:30.716079 | debian-bookworm | 2026-06-02 06:31:30.716111 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 06:31:30.938549 | ubuntu-noble | +# 2026-06-02 06:31:30.938584 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 06:31:30.938593 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 06:31:30.938600 | ubuntu-noble | +# 2026-06-02 06:31:30.938607 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 06:31:30.938614 | ubuntu-noble | +# 2026-06-02 06:31:30.938620 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 06:31:30.938715 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 06:31:30.938932 | ubuntu-noble | +# 2026-06-02 06:31:30.939159 | ubuntu-noble | +# Based on rules published here: 2026-06-02 06:31:30.939422 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 06:31:30.940052 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 06:31:30.940430 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 06:31:30.940803 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 06:31:30.941116 | ubuntu-noble | +# Linux audit repo 2026-06-02 06:31:30.941483 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 06:31:30.941834 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 06:31:30.942172 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 06:31:30.942407 | ubuntu-noble | +# 2026-06-02 06:31:30.942653 | ubuntu-noble | +# Further rules 2026-06-02 06:31:30.942968 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 06:31:30.943298 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 06:31:30.943702 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 06:31:30.944024 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 06:31:30.944229 | ubuntu-noble | + 2026-06-02 06:31:30.944482 | ubuntu-noble | +# Remove any existing rules 2026-06-02 06:31:30.944703 | ubuntu-noble | +-D 2026-06-02 06:31:30.944890 | ubuntu-noble | + 2026-06-02 06:31:30.945076 | ubuntu-noble | +# Buffer Size 2026-06-02 06:31:30.945266 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 06:31:30.945462 | ubuntu-noble | +-b 8192 2026-06-02 06:31:30.945673 | ubuntu-noble | + 2026-06-02 06:31:30.945871 | ubuntu-noble | +# Failure Mode 2026-06-02 06:31:30.946069 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 06:31:30.946248 | ubuntu-noble | +-f 1 2026-06-02 06:31:30.946444 | ubuntu-noble | + 2026-06-02 06:31:30.946649 | ubuntu-noble | +# Ignore errors 2026-06-02 06:31:30.946846 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 06:31:30.947026 | ubuntu-noble | +-i 2026-06-02 06:31:30.947202 | ubuntu-noble | + 2026-06-02 06:31:30.947386 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 06:31:30.947612 | ubuntu-noble | + 2026-06-02 06:31:30.947805 | ubuntu-noble | +## Audit the audit logs 2026-06-02 06:31:30.947999 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 06:31:30.948189 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 06:31:30.948377 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 06:31:30.948617 | ubuntu-noble | + 2026-06-02 06:31:30.948810 | ubuntu-noble | +## Auditd configuration 2026-06-02 06:31:30.948998 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 06:31:30.949165 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 06:31:30.949333 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 06:31:30.949525 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 06:31:30.949689 | ubuntu-noble | + 2026-06-02 06:31:30.949855 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 06:31:30.950018 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 06:31:30.950180 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 06:31:30.950364 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 06:31:30.950562 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 06:31:30.950723 | ubuntu-noble | + 2026-06-02 06:31:30.952522 | ubuntu-noble | +## Access to all audit trails 2026-06-02 06:31:30.952539 | ubuntu-noble | + 2026-06-02 06:31:30.952545 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 06:31:30.952550 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 06:31:30.952555 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 06:31:30.952561 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 06:31:30.952566 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 06:31:30.952571 | ubuntu-noble | + 2026-06-02 06:31:30.952576 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 06:31:30.952581 | ubuntu-noble | + 2026-06-02 06:31:30.952586 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 06:31:30.952591 | ubuntu-noble | + 2026-06-02 06:31:30.952661 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 06:31:30.952822 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 06:31:30.952958 | ubuntu-noble | + 2026-06-02 06:31:30.953106 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 06:31:30.953254 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 06:31:30.953402 | ubuntu-noble | + 2026-06-02 06:31:30.953572 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 06:31:30.953726 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 06:31:30.953873 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 06:31:30.954064 | ubuntu-noble | + 2026-06-02 06:31:30.954227 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 06:31:30.954379 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 06:31:30.954567 | ubuntu-noble | + 2026-06-02 06:31:30.954717 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 06:31:30.954867 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 06:31:30.954997 | ubuntu-noble | + 2026-06-02 06:31:30.955133 | ubuntu-noble | +## Open VM Tools 2026-06-02 06:31:30.955276 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 06:31:30.955416 | ubuntu-noble | + 2026-06-02 06:31:30.955577 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 06:31:30.955723 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 06:31:30.955865 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 06:31:30.955994 | ubuntu-noble | + 2026-06-02 06:31:30.956131 | ubuntu-noble | +## FileBeat 2026-06-02 06:31:30.956270 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 06:31:30.956427 | ubuntu-noble | + 2026-06-02 06:31:30.956589 | ubuntu-noble | +## More information on how to filter events 2026-06-02 06:31:30.956738 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 06:31:30.956868 | ubuntu-noble | + 2026-06-02 06:31:30.956998 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 06:31:30.957115 | ubuntu-noble | + 2026-06-02 06:31:30.957240 | ubuntu-noble | +## Kernel parameters 2026-06-02 06:31:30.957368 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 06:31:30.957519 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 06:31:30.957641 | ubuntu-noble | + 2026-06-02 06:31:30.957766 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 06:31:30.957896 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 06:31:30.958023 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 06:31:30.958150 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 06:31:30.958278 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 06:31:30.958405 | ubuntu-noble | + 2026-06-02 06:31:30.958545 | ubuntu-noble | +## Modprobe configuration 2026-06-02 06:31:30.958700 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 06:31:30.958847 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 06:31:30.958992 | ubuntu-noble | + 2026-06-02 06:31:30.959124 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 06:31:30.959257 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 06:31:30.959455 | ubuntu-noble | + 2026-06-02 06:31:30.959680 | ubuntu-noble | +## Special files 2026-06-02 06:31:30.959892 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 06:31:30.960041 | ubuntu-noble | + 2026-06-02 06:31:30.960160 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 06:31:30.960280 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 06:31:30.960399 | ubuntu-noble | + 2026-06-02 06:31:30.960528 | ubuntu-noble | +### NFS mount 2026-06-02 06:31:30.960660 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.960786 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.960894 | ubuntu-noble | + 2026-06-02 06:31:30.961013 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 06:31:30.961130 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 06:31:30.961237 | ubuntu-noble | + 2026-06-02 06:31:30.961349 | ubuntu-noble | +## Time 2026-06-02 06:31:30.961477 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 06:31:30.961606 | ubuntu-noble | +### Local time zone 2026-06-02 06:31:30.961849 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 06:31:30.961961 | ubuntu-noble | + 2026-06-02 06:31:30.962074 | ubuntu-noble | +## Stunnel 2026-06-02 06:31:30.962194 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 06:31:30.962309 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 06:31:30.962449 | ubuntu-noble | + 2026-06-02 06:31:30.962667 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 06:31:30.962789 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 06:31:30.962904 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 06:31:30.963018 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 06:31:30.963135 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 06:31:30.963249 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 06:31:30.963364 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 06:31:30.963490 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 06:31:30.963622 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 06:31:30.963735 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 06:31:30.963845 | ubuntu-noble | + 2026-06-02 06:31:30.963960 | ubuntu-noble | +## User, group, password databases 2026-06-02 06:31:30.964075 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 06:31:30.964188 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 06:31:30.964300 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 06:31:30.964422 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 06:31:30.965268 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 06:31:30.965299 | ubuntu-noble | + 2026-06-02 06:31:30.965304 | ubuntu-noble | +## Sudoers file changes 2026-06-02 06:31:30.965308 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 06:31:30.965311 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 06:31:30.965314 | ubuntu-noble | + 2026-06-02 06:31:30.965317 | ubuntu-noble | +## Passwd 2026-06-02 06:31:30.965320 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 06:31:30.965326 | ubuntu-noble | + 2026-06-02 06:31:30.965374 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 06:31:30.965493 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 06:31:30.965605 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 06:31:30.965783 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 06:31:30.966064 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 06:31:30.966173 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 06:31:30.966270 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 06:31:30.966556 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 06:31:30.966568 | ubuntu-noble | + 2026-06-02 06:31:30.966599 | ubuntu-noble | +## Login configuration and information 2026-06-02 06:31:30.966700 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 06:31:30.966797 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 06:31:30.966894 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 06:31:30.966993 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 06:31:30.967087 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 06:31:30.967178 | ubuntu-noble | + 2026-06-02 06:31:30.967277 | ubuntu-noble | +## Network Environment 2026-06-02 06:31:30.967374 | ubuntu-noble | +### Changes to hostname 2026-06-02 06:31:30.967528 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 06:31:30.967601 | ubuntu-noble | + 2026-06-02 06:31:30.967699 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 06:31:30.967798 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 06:31:30.967900 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 06:31:30.967994 | ubuntu-noble | + 2026-06-02 06:31:30.968089 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 06:31:30.968263 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 06:31:30.968271 | ubuntu-noble | + 2026-06-02 06:31:30.969295 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 06:31:30.969310 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 06:31:30.969314 | ubuntu-noble | + 2026-06-02 06:31:30.969317 | ubuntu-noble | +### Changes to other files 2026-06-02 06:31:30.969320 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 06:31:30.969323 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 06:31:30.969326 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 06:31:30.969329 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 06:31:30.969332 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 06:31:30.969335 | ubuntu-noble | + 2026-06-02 06:31:30.969637 | ubuntu-noble | +### Changes to issue 2026-06-02 06:31:30.969699 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 06:31:30.969796 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 06:31:30.969890 | ubuntu-noble | + 2026-06-02 06:31:30.969988 | ubuntu-noble | +## System startup scripts 2026-06-02 06:31:30.970084 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 06:31:30.970179 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 06:31:30.970273 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 06:31:30.970369 | ubuntu-noble | + 2026-06-02 06:31:30.970606 | ubuntu-noble | +## Library search paths 2026-06-02 06:31:30.970619 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 06:31:30.970713 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 06:31:30.971533 | ubuntu-noble | + 2026-06-02 06:31:30.971548 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 06:31:30.971551 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 06:31:30.971554 | ubuntu-noble | + 2026-06-02 06:31:30.971557 | ubuntu-noble | +## Pam configuration 2026-06-02 06:31:30.971561 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 06:31:30.971563 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 06:31:30.971566 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 06:31:30.971571 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 06:31:30.971666 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 06:31:30.971760 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 06:31:30.971854 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 06:31:30.971948 | ubuntu-noble | + 2026-06-02 06:31:30.972043 | ubuntu-noble | +## Mail configuration 2026-06-02 06:31:30.972138 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 06:31:30.972236 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 06:31:30.972347 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 06:31:30.972461 | ubuntu-noble | + 2026-06-02 06:31:30.972565 | ubuntu-noble | +## SSH configuration 2026-06-02 06:31:30.972661 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 06:31:30.972759 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 06:31:30.972849 | ubuntu-noble | + 2026-06-02 06:31:30.972946 | ubuntu-noble | +## root ssh key tampering 2026-06-02 06:31:30.973042 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 06:31:30.973133 | ubuntu-noble | + 2026-06-02 06:31:30.973228 | ubuntu-noble | +# Systemd 2026-06-02 06:31:30.973325 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 06:31:30.973448 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 06:31:30.973564 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 06:31:30.973656 | ubuntu-noble | + 2026-06-02 06:31:30.973757 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 06:31:30.973856 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:30.973956 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:30.974060 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 06:31:30.974152 | ubuntu-noble | + 2026-06-02 06:31:30.974251 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 06:31:30.974354 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 06:31:30.974497 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 06:31:30.974629 | ubuntu-noble | + 2026-06-02 06:31:30.974733 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 06:31:30.974830 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 06:31:30.974921 | ubuntu-noble | + 2026-06-02 06:31:30.975018 | ubuntu-noble | +## Critical elements access failures 2026-06-02 06:31:30.975121 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975224 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975324 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975437 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975556 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975652 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975752 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975854 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 06:31:30.975944 | ubuntu-noble | + 2026-06-02 06:31:30.976044 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 06:31:30.976142 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 06:31:30.976239 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 06:31:30.976331 | ubuntu-noble | + 2026-06-02 06:31:30.976436 | ubuntu-noble | +## Power state 2026-06-02 06:31:30.976553 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 06:31:30.976639 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 06:31:30.977531 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 06:31:30.977546 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 06:31:30.977549 | ubuntu-noble | + 2026-06-02 06:31:30.977552 | ubuntu-noble | +## Session initiation information 2026-06-02 06:31:30.977555 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 06:31:30.977558 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 06:31:30.977561 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 06:31:30.977564 | ubuntu-noble | + 2026-06-02 06:31:31.096971 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.006659", "end": "2026-06-02 06:31:31.057959", "msg": "", "rc": 0, "start": "2026-06-02 06:31:31.051300", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 06:31:30.977567 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 06:31:31.097010 | debian-bookworm | 2026-06-02 06:31:30.977596 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.097016 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 06:31:30.977695 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416801 | debian-bookworm | --- before 2026-06-02 06:31:30.977796 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416841 | debian-bookworm | +++ after 2026-06-02 06:31:30.977896 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416847 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 06:31:30.977999 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416851 | debian-bookworm | { 2026-06-02 06:31:30.978099 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416856 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 06:31:30.978199 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416861 | debian-bookworm | - "state": "file" 2026-06-02 06:31:30.978300 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416866 | debian-bookworm | + "state": "absent" 2026-06-02 06:31:30.978422 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416870 | debian-bookworm | } 2026-06-02 06:31:30.978525 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416874 | debian-bookworm | 2026-06-02 06:31:30.978627 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416879 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 06:31:30.978728 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416886 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 06:31:30.978833 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 06:31:31.416891 | debian-bookworm | 2026-06-02 06:31:30.978920 | ubuntu-noble | + 2026-06-02 06:31:31.416896 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 06:31:30.979014 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 06:31:30.979106 | ubuntu-noble | + 2026-06-02 06:31:30.979202 | ubuntu-noble | +## Reconnaissance 2026-06-02 06:31:30.979306 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 06:31:30.979412 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 06:31:30.979548 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 06:31:30.979649 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 06:31:30.979746 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 06:31:30.979841 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 06:31:30.979933 | ubuntu-noble | + 2026-06-02 06:31:30.980029 | ubuntu-noble | +## Suspicious activity 2026-06-02 06:31:30.980128 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 06:31:30.980225 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 06:31:30.980326 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 06:31:30.980445 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 06:31:30.980554 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 06:31:30.980654 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 06:31:30.980751 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 06:31:30.980848 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 06:31:30.980945 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 06:31:30.981041 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 06:31:30.981138 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 06:31:30.981235 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 06:31:30.981419 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 06:31:30.981530 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 06:31:30.981635 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 06:31:30.981735 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 06:31:30.981835 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 06:31:30.981936 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 06:31:30.982037 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 06:31:30.982134 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 06:31:30.982231 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 06:31:30.982329 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 06:31:30.982430 | ubuntu-noble | + 2026-06-02 06:31:30.982537 | ubuntu-noble | +## sssd 2026-06-02 06:31:30.982646 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.982751 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.982856 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.982961 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.983063 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.983153 | ubuntu-noble | + 2026-06-02 06:31:30.983251 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 06:31:30.983343 | ubuntu-noble | + 2026-06-02 06:31:30.983452 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 06:31:30.983563 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 06:31:30.983664 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 06:31:30.983765 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 06:31:30.983858 | ubuntu-noble | + 2026-06-02 06:31:30.983961 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 06:31:30.984062 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 06:31:30.986523 | ubuntu-noble | + 2026-06-02 06:31:30.986541 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 06:31:30.986544 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 06:31:30.986548 | ubuntu-noble | + 2026-06-02 06:31:30.986551 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 06:31:30.986554 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 06:31:30.986557 | ubuntu-noble | + 2026-06-02 06:31:30.986560 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 06:31:30.986563 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 06:31:30.986566 | ubuntu-noble | + 2026-06-02 06:31:30.986569 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 06:31:30.986578 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 06:31:30.986582 | ubuntu-noble | + 2026-06-02 06:31:30.986585 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 06:31:30.986588 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 06:31:30.986591 | ubuntu-noble | + 2026-06-02 06:31:30.986594 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 06:31:30.986597 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 06:31:30.986600 | ubuntu-noble | + 2026-06-02 06:31:30.986603 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 06:31:30.986606 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 06:31:30.986609 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 06:31:30.986612 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 06:31:30.986644 | ubuntu-noble | + 2026-06-02 06:31:30.986760 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 06:31:30.986863 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 06:31:30.986971 | ubuntu-noble | + 2026-06-02 06:31:30.987083 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 06:31:30.987213 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 06:31:30.987320 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 06:31:30.987431 | ubuntu-noble | + 2026-06-02 06:31:30.987557 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 06:31:30.987666 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 06:31:30.987766 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 06:31:30.987865 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 06:31:30.987963 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 06:31:30.988062 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 06:31:30.988162 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 06:31:30.988257 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 06:31:30.988357 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 06:31:30.988466 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 06:31:30.988575 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 06:31:30.988670 | ubuntu-noble | + 2026-06-02 06:31:30.988773 | ubuntu-noble | +### kde4 2026-06-02 06:31:30.988869 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.988973 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 06:31:30.989066 | ubuntu-noble | + 2026-06-02 06:31:30.989189 | ubuntu-noble | +## dbus-send invocation 2026-06-02 06:31:30.989292 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 06:31:30.989400 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 06:31:30.989562 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 06:31:30.989663 | ubuntu-noble | + 2026-06-02 06:31:30.989772 | ubuntu-noble | +## pkexec invocation 2026-06-02 06:31:30.989878 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 06:31:30.989971 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 06:31:30.990062 | ubuntu-noble | + 2026-06-02 06:31:30.990160 | ubuntu-noble | +## Suspicious shells 2026-06-02 06:31:30.990258 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 06:31:30.990355 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 06:31:30.990471 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 06:31:30.990573 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 06:31:30.990671 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 06:31:30.990769 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 06:31:30.990866 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 06:31:30.990965 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 06:31:30.991059 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 06:31:30.991149 | ubuntu-noble | + 2026-06-02 06:31:30.991246 | ubuntu-noble | +# Web Server Actvity 2026-06-02 06:31:30.991350 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 06:31:30.991461 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 06:31:30.991562 | ubuntu-noble | + 2026-06-02 06:31:30.991660 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 06:31:30.991755 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 06:31:30.991862 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 06:31:30.991960 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 06:31:30.992054 | ubuntu-noble | + 2026-06-02 06:31:30.992151 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 06:31:30.992249 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 06:31:30.992346 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 06:31:30.992458 | ubuntu-noble | + 2026-06-02 06:31:30.992571 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 06:31:30.992670 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 06:31:30.992767 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 06:31:30.992864 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 06:31:30.992961 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 06:31:30.993059 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 06:31:30.993159 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 06:31:30.993255 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 06:31:30.993352 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 06:31:30.993465 | ubuntu-noble | + 2026-06-02 06:31:30.993571 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 06:31:30.993669 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 06:31:30.993767 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 06:31:30.993865 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 06:31:30.993956 | ubuntu-noble | + 2026-06-02 06:31:30.994052 | ubuntu-noble | +## Injection 2026-06-02 06:31:30.994155 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 06:31:30.994252 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 06:31:30.994352 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 06:31:30.994461 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 06:31:30.994571 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 06:31:30.994673 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 06:31:30.994766 | ubuntu-noble | + 2026-06-02 06:31:30.994865 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 06:31:30.994961 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 06:31:30.995060 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 06:31:30.995161 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 06:31:30.995263 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 06:31:30.995354 | ubuntu-noble | + 2026-06-02 06:31:30.995470 | ubuntu-noble | +## Privilege Abuse 2026-06-02 06:31:30.995584 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 06:31:30.995686 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 06:31:30.995777 | ubuntu-noble | + 2026-06-02 06:31:30.995874 | ubuntu-noble | +# Socket Creations 2026-06-02 06:31:30.995973 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 06:31:30.996065 | ubuntu-noble | + 2026-06-02 06:31:30.996169 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 06:31:30.996269 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 06:31:30.996362 | ubuntu-noble | + 2026-06-02 06:31:30.996471 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 06:31:30.996582 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 06:31:30.996675 | ubuntu-noble | + 2026-06-02 06:31:30.996770 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 06:31:30.996864 | ubuntu-noble | + 2026-06-02 06:31:30.996964 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 06:31:30.997071 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 06:31:30.997162 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 06:31:30.997253 | ubuntu-noble | + 2026-06-02 06:31:30.997353 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 06:31:30.997541 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 06:31:30.997588 | ubuntu-noble | + 2026-06-02 06:31:30.997673 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 06:31:30.997769 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 06:31:30.997867 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 06:31:30.997962 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 06:31:30.998060 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 06:31:30.998150 | ubuntu-noble | + 2026-06-02 06:31:30.998247 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 06:31:30.998344 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 06:31:30.998464 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 06:31:30.998571 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 06:31:30.998671 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 06:31:30.998770 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 06:31:30.998868 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 06:31:30.998967 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 06:31:30.999063 | ubuntu-noble | + 2026-06-02 06:31:30.999163 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 06:31:30.999264 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999364 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999489 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999608 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999707 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999807 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 06:31:30.999898 | ubuntu-noble | + 2026-06-02 06:31:30.999992 | ubuntu-noble | +# npm 2026-06-02 06:31:31.000091 | ubuntu-noble | +## T1072 third party software 2026-06-02 06:31:31.000193 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 06:31:31.000296 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 06:31:31.000436 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 06:31:31.000542 | ubuntu-noble | + 2026-06-02 06:31:31.000645 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 06:31:31.000743 | ubuntu-noble | +## T1072 third party software 2026-06-02 06:31:31.000840 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 06:31:31.000947 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 06:31:31.001039 | ubuntu-noble | + 2026-06-02 06:31:31.001141 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 06:31:31.001241 | ubuntu-noble | +## T1072 third party software 2026-06-02 06:31:31.001336 | ubuntu-noble | +## https://rubygems.org 2026-06-02 06:31:31.001453 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 06:31:31.001566 | ubuntu-noble | + 2026-06-02 06:31:31.001662 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 06:31:31.001759 | ubuntu-noble | +## T1072 third party software 2026-06-02 06:31:31.001855 | ubuntu-noble | +## https://luarocks.org 2026-06-02 06:31:31.001959 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 06:31:31.002050 | ubuntu-noble | + 2026-06-02 06:31:31.002149 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 06:31:31.002251 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 06:31:31.002349 | ubuntu-noble | +## T1072 third party software 2026-06-02 06:31:31.002458 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 06:31:31.002570 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 06:31:31.002662 | ubuntu-noble | + 2026-06-02 06:31:31.002758 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 06:31:31.002848 | ubuntu-noble | + 2026-06-02 06:31:31.002945 | ubuntu-noble | +## GDS specific secrets 2026-06-02 06:31:31.003041 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 06:31:31.003133 | ubuntu-noble | + 2026-06-02 06:31:31.003230 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 06:31:31.003338 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 06:31:31.003458 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 06:31:31.003561 | ubuntu-noble | + 2026-06-02 06:31:31.003660 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 06:31:31.003756 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 06:31:31.003846 | ubuntu-noble | + 2026-06-02 06:31:31.003944 | ubuntu-noble | +## Salt 2026-06-02 06:31:31.004042 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 06:31:31.004143 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 06:31:31.004241 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 06:31:31.004340 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 06:31:31.004440 | ubuntu-noble | + 2026-06-02 06:31:31.004547 | ubuntu-noble | +## Otter 2026-06-02 06:31:31.004642 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 06:31:31.004739 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 06:31:31.004832 | ubuntu-noble | + 2026-06-02 06:31:31.004929 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 06:31:31.005027 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 06:31:31.005123 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 06:31:31.005221 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 06:31:31.005317 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.005423 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 06:31:31.005534 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 06:31:31.005634 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 06:31:31.005725 | ubuntu-noble | + 2026-06-02 06:31:31.005824 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 06:31:31.005923 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 06:31:31.006016 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.006115 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 06:31:31.006206 | ubuntu-noble | + 2026-06-02 06:31:31.006308 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 06:31:31.006424 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 06:31:31.006530 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.006630 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 06:31:31.006723 | ubuntu-noble | + 2026-06-02 06:31:31.006824 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 06:31:31.006915 | ubuntu-noble | + 2026-06-02 06:31:31.007038 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 06:31:31.007106 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.007206 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 06:31:31.007299 | ubuntu-noble | + 2026-06-02 06:31:31.007407 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 06:31:31.007517 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 06:31:31.007612 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.007713 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 06:31:31.007803 | ubuntu-noble | + 2026-06-02 06:31:31.007903 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 06:31:31.008003 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 06:31:31.008113 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.008204 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 06:31:31.008298 | ubuntu-noble | + 2026-06-02 06:31:31.008420 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 06:31:31.008575 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 06:31:31.008625 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.008727 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 06:31:31.008820 | ubuntu-noble | + 2026-06-02 06:31:31.008919 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 06:31:31.009016 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 06:31:31.009112 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.009211 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 06:31:31.009301 | ubuntu-noble | + 2026-06-02 06:31:31.009410 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 06:31:31.009521 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 06:31:31.009617 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.009716 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 06:31:31.009807 | ubuntu-noble | + 2026-06-02 06:31:31.009905 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 06:31:31.010004 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 06:31:31.010103 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 06:31:31.010203 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 06:31:31.010301 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 06:31:31.010418 | ubuntu-noble | +### macOS 2026-06-02 06:31:31.010519 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 06:31:31.010614 | ubuntu-noble | + 2026-06-02 06:31:31.010706 | ubuntu-noble | +## Docker 2026-06-02 06:31:31.010804 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 06:31:31.010900 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 06:31:31.010996 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 06:31:31.011092 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 06:31:31.011188 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 06:31:31.011284 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 06:31:31.011382 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 06:31:31.012383 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 06:31:31.012405 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 06:31:31.012415 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 06:31:31.012418 | ubuntu-noble | + 2026-06-02 06:31:31.012421 | ubuntu-noble | +## Virtualization stuff 2026-06-02 06:31:31.012424 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 06:31:31.012427 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 06:31:31.012430 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 06:31:31.012433 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 06:31:31.012436 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 06:31:31.012441 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 06:31:31.012535 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 06:31:31.012629 | ubuntu-noble | + 2026-06-02 06:31:31.012728 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 06:31:31.012820 | ubuntu-noble | + 2026-06-02 06:31:31.012920 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 06:31:31.013018 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 06:31:31.013116 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 06:31:31.013216 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 06:31:31.013315 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 06:31:31.013424 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 06:31:31.013538 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 06:31:31.013638 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 06:31:31.013735 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 06:31:31.013834 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 06:31:31.013931 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 06:31:31.014034 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 06:31:31.014136 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 06:31:31.014238 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 06:31:31.014340 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 06:31:31.014459 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 06:31:31.014585 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 06:31:31.014687 | ubuntu-noble | + 2026-06-02 06:31:31.014767 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 06:31:31.014858 | ubuntu-noble | + 2026-06-02 06:31:31.014957 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 06:31:31.015527 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 06:31:31.015538 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 06:31:31.015542 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 06:31:31.015545 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 06:31:31.015548 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 06:31:31.015613 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 06:31:31.015714 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 06:31:31.015804 | ubuntu-noble | + 2026-06-02 06:31:31.015900 | ubuntu-noble | +### qemu on macOS 2026-06-02 06:31:31.015992 | ubuntu-noble | + 2026-06-02 06:31:31.016093 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 06:31:31.016191 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 06:31:31.016292 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 06:31:31.016412 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 06:31:31.016494 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 06:31:31.016596 | ubuntu-noble | + 2026-06-02 06:31:31.016690 | ubuntu-noble | +## Kubelet 2026-06-02 06:31:31.016788 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 06:31:31.016879 | ubuntu-noble | + 2026-06-02 06:31:31.016975 | ubuntu-noble | +# ipc system call 2026-06-02 06:31:31.017072 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 06:31:31.017163 | ubuntu-noble | + 2026-06-02 06:31:31.017260 | ubuntu-noble | +## msgctl 2026-06-02 06:31:31.017363 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 06:31:31.017467 | ubuntu-noble | +## msgget 2026-06-02 06:31:31.017589 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 06:31:31.017687 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:31.017792 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 06:31:31.017892 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 06:31:31.017983 | ubuntu-noble | + 2026-06-02 06:31:31.018076 | ubuntu-noble | +## semctl 2026-06-02 06:31:31.018178 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 06:31:31.018270 | ubuntu-noble | +## semget 2026-06-02 06:31:31.018372 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 06:31:31.018488 | ubuntu-noble | +## semop 2026-06-02 06:31:31.018603 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 06:31:31.018892 | ubuntu-noble | +## semtimedop 2026-06-02 06:31:31.018899 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 06:31:31.018903 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:31.018996 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 06:31:31.019119 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 06:31:31.019227 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 06:31:31.019337 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 06:31:31.019438 | ubuntu-noble | + 2026-06-02 06:31:31.019547 | ubuntu-noble | +## shmctl 2026-06-02 06:31:31.019654 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 06:31:31.019744 | ubuntu-noble | +## shmget 2026-06-02 06:31:31.019844 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 06:31:31.019967 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 06:31:31.020046 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 06:31:31.020152 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 06:31:31.020242 | ubuntu-noble | + 2026-06-02 06:31:31.020343 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 06:31:31.020443 | ubuntu-noble | + 2026-06-02 06:31:31.020554 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 06:31:31.020647 | ubuntu-noble | + 2026-06-02 06:31:31.020746 | ubuntu-noble | +## Common Shells 2026-06-02 06:31:31.020844 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 06:31:31.020942 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 06:31:31.021041 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 06:31:31.021142 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 06:31:31.021236 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 06:31:31.021354 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 06:31:31.021590 | ubuntu-noble | + 2026-06-02 06:31:31.021705 | ubuntu-noble | +## Root command executions 2026-06-02 06:31:31.021817 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 06:31:31.021929 | ubuntu-noble | + 2026-06-02 06:31:31.022044 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 06:31:31.022164 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 06:31:31.022261 | ubuntu-noble | + 2026-06-02 06:31:31.022378 | ubuntu-noble | +## File Access 2026-06-02 06:31:31.022514 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 06:31:31.022626 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 06:31:31.022734 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 06:31:31.022834 | ubuntu-noble | + 2026-06-02 06:31:31.022934 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 06:31:31.023038 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 06:31:31.023140 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 06:31:31.023232 | ubuntu-noble | + 2026-06-02 06:31:31.023331 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 06:31:31.023443 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 06:31:31.023562 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 06:31:31.023659 | ubuntu-noble | + 2026-06-02 06:31:31.023757 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 06:31:31.023861 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 06:31:31.023997 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 06:31:31.024111 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 06:31:31.024209 | ubuntu-noble | +### bit API. 2026-06-02 06:31:31.024327 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 06:31:31.024432 | ubuntu-noble | + 2026-06-02 06:31:31.024573 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 06:31:31.024671 | ubuntu-noble | + 2026-06-02 06:31:31.024767 | ubuntu-noble | +##-e 2 2026-06-02 06:31:31.024863 | ubuntu-noble | 2026-06-02 06:31:31.025330 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780381890.0393126-2420-90264199376581/.source.rules", "state": "file", "uid": 0} 2026-06-02 06:31:31.025339 | ubuntu-noble | 2026-06-02 06:31:31.025423 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 06:31:31.705350 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ActiveEnterTimestampMonotonic": "1132280609", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:24 UTC", "AssertTimestampMonotonic": "1132233429", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "32509000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ConditionTimestampMonotonic": "1132233307", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2189", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ExecMainStartTimestampMonotonic": "1132253976", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2193 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2193 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:24 UTC", "InactiveExitTimestampMonotonic": "1132244442", "InvocationID": "4f8e00b898e54e99ac978462c336d68d", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2189", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3510988800", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2183168", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 06:31:24 UTC", "StateChangeTimestampMonotonic": "1132280609", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:31.713947 | ubuntu-noble | 2026-06-02 06:31:31.714681 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 06:31:32.174868 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.005455", "end": "2026-06-02 06:31:32.118154", "msg": "", "rc": 0, "start": "2026-06-02 06:31:32.112699", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 06:31:32.174929 | ubuntu-noble | 2026-06-02 06:31:32.174939 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 06:31:32.152773 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ActiveEnterTimestampMonotonic": "1104966989", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:23 UTC", "AssertTimestampMonotonic": "1104898057", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "55028000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ConditionTimestampMonotonic": "1104898018", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2423", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:23 UTC", "ExecMainStartTimestampMonotonic": "1104938648", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2422 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2422 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2426 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:23 UTC] ; stop_time=[Tue 2026-06-02 06:31:23 UTC] ; pid=2426 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:23 UTC", "InactiveExitTimestampMonotonic": "1104916823", "InvocationID": "14cd62e2b81049b682c3955f56428370", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2423", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 06:31:23 UTC", "StateChangeTimestampMonotonic": "1104966989", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:32.163357 | debian-bookworm | 2026-06-02 06:31:32.163397 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 06:31:32.531152 | ubuntu-noble | --- before 2026-06-02 06:31:32.531190 | ubuntu-noble | +++ after 2026-06-02 06:31:32.531194 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 06:31:32.531199 | ubuntu-noble | { 2026-06-02 06:31:32.531202 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 06:31:32.531207 | ubuntu-noble | - "state": "file" 2026-06-02 06:31:32.531211 | ubuntu-noble | + "state": "absent" 2026-06-02 06:31:32.531214 | ubuntu-noble | } 2026-06-02 06:31:32.531218 | ubuntu-noble | 2026-06-02 06:31:32.531223 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 06:31:32.531229 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 06:31:32.531239 | ubuntu-noble | 2026-06-02 06:31:32.531243 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 06:31:32.599050 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.074540", "end": "2026-06-02 06:31:32.516666", "msg": "", "rc": 0, "start": "2026-06-02 06:31:32.442126", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2813\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1163\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2813\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1163\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2813", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1163", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2813", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1163", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 06:31:32.599114 | debian-bookworm | 2026-06-02 06:31:32.599124 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 06:31:33.186582 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ActiveEnterTimestampMonotonic": "1132280609", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:24 UTC", "AssertTimestampMonotonic": "1132233429", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "33554000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ConditionTimestampMonotonic": "1132233307", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2189", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:24 UTC", "ExecMainStartTimestampMonotonic": "1132253976", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2188 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2193 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:24 UTC] ; stop_time=[Tue 2026-06-02 06:31:24 UTC] ; pid=2193 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:24 UTC", "InactiveExitTimestampMonotonic": "1132244442", "InvocationID": "4f8e00b898e54e99ac978462c336d68d", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2189", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3515645952", "MemoryCurrent": "516096", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2183168", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 06:31:24 UTC", "StateChangeTimestampMonotonic": "1132280609", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:33.190728 | ubuntu-noble | 2026-06-02 06:31:33.190904 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 06:31:33.422088 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:32 UTC", "ActiveEnterTimestampMonotonic": "1113236498", "ActiveExitTimestamp": "Tue 2026-06-02 06:31:31 UTC", "ActiveExitTimestampMonotonic": "1113019726", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:31 UTC", "AssertTimestampMonotonic": "1113062314", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "166253000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:31 UTC", "ConditionTimestampMonotonic": "1113062240", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3328", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2813", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:31 UTC", "ExecMainStartTimestampMonotonic": "1113102393", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:31 UTC] ; stop_time=[Tue 2026-06-02 06:31:31 UTC] ; pid=2811 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:31 UTC] ; stop_time=[Tue 2026-06-02 06:31:31 UTC] ; pid=2811 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:31 UTC] ; stop_time=[Tue 2026-06-02 06:31:32 UTC] ; pid=2816 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:31 UTC] ; stop_time=[Tue 2026-06-02 06:31:32 UTC] ; pid=2816 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 06:31:31 UTC", "InactiveEnterTimestampMonotonic": "1113060875", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:31 UTC", "InactiveExitTimestampMonotonic": "1113081419", "InvocationID": "4bb7d87ea4ce4008b4d529cbd3c2ab3d", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2813", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2084864", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 06:31:32 UTC", "StateChangeTimestampMonotonic": "1113236498", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:33.423019 | debian-bookworm | 2026-06-02 06:31:33.423041 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 06:31:33.423047 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 06:31:33.423051 | debian-bookworm | 2026-06-02 06:31:33.536955 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.054248", "end": "2026-06-02 06:31:33.488261", "msg": "", "rc": 0, "start": "2026-06-02 06:31:33.434013", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2582\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 802\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2582\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 800\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2582", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 802", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2582", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 800", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 06:31:33.537020 | ubuntu-noble | 2026-06-02 06:31:33.537124 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 06:31:33.515409 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 06:31:33.516082 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 06:31:33.956029 | debian-bookworm | ok: Runtime: 0:00:17.683568 2026-06-02 06:31:34.216988 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 06:31:33 UTC", "ActiveEnterTimestampMonotonic": "1140888586", "ActiveExitTimestamp": "Tue 2026-06-02 06:31:32 UTC", "ActiveExitTimestampMonotonic": "1140748715", "ActiveState": "active", "After": "system.slice systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 06:31:33 UTC", "AssertTimestampMonotonic": "1140788662", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "140711000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 06:31:33 UTC", "ConditionTimestampMonotonic": "1140788584", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2582", "ExecMainStartTimestamp": "Tue 2026-06-02 06:31:33 UTC", "ExecMainStartTimestampMonotonic": "1140822272", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 06:31:33 UTC] ; stop_time=[Tue 2026-06-02 06:31:33 UTC] ; pid=2580 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 06:31:33 UTC] ; stop_time=[Tue 2026-06-02 06:31:33 UTC] ; pid=2580 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 06:31:33 UTC] ; stop_time=[Tue 2026-06-02 06:31:33 UTC] ; pid=2585 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 06:31:33 UTC] ; stop_time=[Tue 2026-06-02 06:31:33 UTC] ; pid=2585 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 06:31:33 UTC", "InactiveEnterTimestampMonotonic": "1140786545", "InactiveExitTimestamp": "Tue 2026-06-02 06:31:33 UTC", "InactiveExitTimestampMonotonic": "1140794460", "InvocationID": "2ad142bf0f9b4e03bf35188d9dda01a0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2582", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3541839872", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2121728", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 06:31:33 UTC", "StateChangeTimestampMonotonic": "1140888586", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 06:31:34.220218 | ubuntu-noble | 2026-06-02 06:31:34.220241 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 06:31:34.220247 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 06:31:34.220251 | ubuntu-noble | 2026-06-02 06:31:34.292660 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 06:31:34.293180 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 06:31:34.447927 | ubuntu-noble | ok: Runtime: 0:00:18.435359 2026-06-02 06:31:34.466278 | 2026-06-02 06:31:34.466400 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 06:31:35.224726 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:35.236338 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:35.198557 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 06:31:35.217444 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:35.751801 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:35.752451 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:35.774819 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:35.780462 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 06:31:35.780579 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:35.689375 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 06:31:35.690096 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 06:31:35.712398 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 06:31:35.717883 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 06:31:35.717969 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 06:31:37.172595 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 06:31:37.176221 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 06:31:37.180213 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:37.180284 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:37.180308 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:37.180324 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:37.180338 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:37.180352 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 06:31:37.180365 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:37.180407 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:37.180423 | ubuntu-noble | 2026-06-02 06:31:37.180439 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:37.180452 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 06:31:37.180465 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:37.180478 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:37.180491 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:37.180538 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:37.180552 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:37.180566 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:37.180579 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:37.180593 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:37.180607 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:37.180620 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:37.180633 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:37.180646 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:37.180660 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:37.180673 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:37.180687 | ubuntu-noble | 2026-06-02 06:31:37.180725 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:37.475016 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 06:31:37.492578 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 06:31:37.492641 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 06:31:37.492659 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 06:31:37.492942 | ubuntu-noble | registered third-party plugins: 2026-06-02 06:31:37.493345 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 06:31:37.493776 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 06:31:37.494165 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 06:31:37.181368 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 06:31:37.183136 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 06:31:37.184011 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 06:31:37.184037 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 06:31:37.184057 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 06:31:37.184075 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 06:31:37.184092 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 06:31:37.184108 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 06:31:37.184124 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 06:31:37.184162 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 06:31:37.184179 | debian-bookworm | 2026-06-02 06:31:37.184204 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 06:31:37.184219 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 06:31:37.184234 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 06:31:37.184248 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 06:31:37.184263 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 06:31:37.184277 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 06:31:37.184291 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 06:31:37.184305 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 06:31:37.184319 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 06:31:37.184334 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 06:31:37.184348 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 06:31:37.184362 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 06:31:37.184377 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 06:31:37.184391 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 06:31:37.184404 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 06:31:37.184419 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:37.184434 | debian-bookworm | 2026-06-02 06:31:37.184468 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 06:31:37.428643 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 06:31:37.442740 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 06:31:37.443081 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 06:31:37.443455 | debian-bookworm | using: pytest-8.4.2 2026-06-02 06:31:37.443740 | debian-bookworm | registered third-party plugins: 2026-06-02 06:31:37.444391 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 06:31:37.444690 | debian-bookworm | rootdir: /home/zuul 2026-06-02 06:31:37.445060 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 06:31:38.420867 | debian-bookworm | collecting ... collected 6 items 2026-06-02 06:31:38.421211 | debian-bookworm | 2026-06-02 06:31:38.523097 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 06:31:38.523278 | ubuntu-noble | 2026-06-02 06:31:42.559074 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 06:31:42.610898 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 06:31:43.987929 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 06:31:44.031865 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 06:31:45.033009 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 06:31:46.639240 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 06:31:49.838812 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 06:31:51.042123 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 06:31:51.114647 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 06:31:51.115202 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 06:31:51.115350 | debian-bookworm | 2026-06-02 06:31:51.115468 | debian-bookworm | ============================== 6 passed in 13.63s ============================== 2026-06-02 06:31:51.156461 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 06:31:51.156533 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 06:31:51.156550 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 06:31:51.539289 | debian-bookworm | ok: Runtime: 0:00:16.344588 2026-06-02 06:31:52.031934 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 06:31:53.913518 | ubuntu-noble | ok: Runtime: 0:00:18.974720 2026-06-02 06:31:53.923021 | 2026-06-02 06:31:53.923291 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 06:31:53.589728 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 06:31:53.694607 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 06:31:53.696581 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 06:31:53.696644 | ubuntu-noble | 2026-06-02 06:31:53.696846 | ubuntu-noble | ============================== 6 passed in 16.14s ============================== 2026-06-02 06:31:53.757423 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 06:31:53.758194 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 06:31:53.759463 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 06:31:54.485913 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:31:54.486472 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:31:54.498607 | 2026-06-02 06:31:54.498708 | PLAY RECAP 2026-06-02 06:31:54.498767 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 06:31:54.498800 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 06:31:54.498821 | 2026-06-02 06:31:54.682621 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 06:31:54.684152 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 06:31:55.460134 | 2026-06-02 06:31:55.460405 | PLAY [Collect container logs] 2026-06-02 06:31:55.474681 | 2026-06-02 06:31:55.474814 | TASK [Create container log directory] 2026-06-02 06:31:56.182752 | debian-bookworm | changed 2026-06-02 06:31:56.234281 | ubuntu-noble | changed 2026-06-02 06:31:56.241326 | 2026-06-02 06:31:56.241478 | TASK [Capture container overview] 2026-06-02 06:31:56.804718 | debian-bookworm | ok: Runtime: 0:00:00.010666 2026-06-02 06:31:56.832378 | ubuntu-noble | ok: Runtime: 0:00:00.009239 2026-06-02 06:31:56.838716 | 2026-06-02 06:31:56.838872 | TASK [List containers] 2026-06-02 06:31:57.413358 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 06:31:57.414232 | debian-bookworm | { 2026-06-02 06:31:57.414376 | debian-bookworm | "failed_when_result": false, 2026-06-02 06:31:57.414467 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 06:31:57.414557 | debian-bookworm | "rc": 2 2026-06-02 06:31:57.414678 | debian-bookworm | } 2026-06-02 06:31:57.426631 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 06:31:57.426894 | ubuntu-noble | { 2026-06-02 06:31:57.426960 | ubuntu-noble | "failed_when_result": false, 2026-06-02 06:31:57.427021 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 06:31:57.427063 | ubuntu-noble | "rc": 2 2026-06-02 06:31:57.427098 | ubuntu-noble | } 2026-06-02 06:31:57.435482 | 2026-06-02 06:31:57.435654 | LOOP [Save per-container logs] 2026-06-02 06:31:57.534090 | 2026-06-02 06:31:57.534412 | LOOP [Save per-container inspect (state and health)] 2026-06-02 06:31:57.621142 | 2026-06-02 06:31:57.621366 | TASK [Capture netbox systemd unit journal] 2026-06-02 06:31:58.186545 | debian-bookworm | ok: Runtime: 0:00:00.018535 2026-06-02 06:31:58.200201 | ubuntu-noble | ok: Runtime: 0:00:00.019192 2026-06-02 06:31:58.209329 | 2026-06-02 06:31:58.209520 | TASK [Capture netbox service state] 2026-06-02 06:31:58.848081 | debian-bookworm | ok: Runtime: 0:00:00.037818 2026-06-02 06:31:58.860225 | ubuntu-noble | ok: Runtime: 0:00:00.039197 2026-06-02 06:31:58.867253 | 2026-06-02 06:31:58.867389 | TASK [Capture docker compose version] 2026-06-02 06:31:59.428257 | debian-bookworm | ok: Runtime: 0:00:00.011076 2026-06-02 06:31:59.441244 | ubuntu-noble | ok: Runtime: 0:00:00.009268 2026-06-02 06:31:59.449982 | 2026-06-02 06:31:59.450119 | TASK [Open container log permissions] 2026-06-02 06:31:59.764509 | debian-bookworm | changed 2026-06-02 06:31:59.838554 | ubuntu-noble | changed 2026-06-02 06:31:59.841122 | 2026-06-02 06:31:59.841243 | PLAY RECAP 2026-06-02 06:31:59.841325 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 06:31:59.841377 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 06:31:59.841412 | 2026-06-02 06:31:59.986014 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 06:31:59.989416 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 06:32:00.775275 | 2026-06-02 06:32:00.775445 | PLAY [Base post-fetch] 2026-06-02 06:32:00.790137 | 2026-06-02 06:32:00.790279 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 06:32:00.873516 | debian-bookworm | ok 2026-06-02 06:32:00.891736 | ubuntu-noble | ok 2026-06-02 06:32:00.898283 | 2026-06-02 06:32:00.898433 | TASK [fetch-output : Set log path for single node] 2026-06-02 06:32:00.934768 | debian-bookworm | skipping: Conditional result was False 2026-06-02 06:32:00.945917 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 06:32:00.955639 | 2026-06-02 06:32:00.955792 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 06:32:01.544343 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/logs/debian-bookworm" 2026-06-02 06:32:01.566220 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/logs/ubuntu-noble" 2026-06-02 06:32:01.821263 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/artifacts" 2026-06-02 06:32:01.856883 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/artifacts" 2026-06-02 06:32:02.115240 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/docs" 2026-06-02 06:32:02.155778 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/ed9dff0bb766448faf8637deb779e0e7/work/docs" 2026-06-02 06:32:02.155918 | ubuntu-noble -> localhost | changed: All items complete 2026-06-02 06:32:02.155951 | 2026-06-02 06:32:02.172161 | 2026-06-02 06:32:02.172389 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 06:32:02.969234 | debian-bookworm | changed: 2026-06-02 06:32:02.969526 | debian-bookworm | .d..t...... ./ 2026-06-02 06:32:02.969619 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 06:32:02.969651 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 06:32:02.969677 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 06:32:02.969701 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 06:32:02.969736 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 06:32:02.969757 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 06:32:02.969777 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 06:32:02.969797 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 06:32:02.976376 | ubuntu-noble | changed: 2026-06-02 06:32:02.976492 | ubuntu-noble | .d..t...... ./ 2026-06-02 06:32:02.976533 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 06:32:02.976563 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 06:32:02.976602 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 06:32:02.976629 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 06:32:02.976654 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 06:32:02.976680 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 06:32:02.976705 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 06:32:02.976730 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 06:32:03.578037 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 06:32:03.596696 | debian-bookworm | ok 2026-06-02 06:32:04.219673 | debian-bookworm | changed: .d..t...... ./ 2026-06-02 06:32:04.231285 | ubuntu-noble | ok 2026-06-02 06:32:04.231431 | ubuntu-noble | changed: All items complete 2026-06-02 06:32:04.231470 | 2026-06-02 06:32:04.256441 | 2026-06-02 06:32:04.256631 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 06:32:04.818296 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.010655 2026-06-02 06:32:05.128694 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.006334 2026-06-02 06:32:05.146279 | 2026-06-02 06:32:05.146393 | PLAY RECAP 2026-06-02 06:32:05.146450 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 06:32:05.146486 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 06:32:05.146510 | 2026-06-02 06:32:05.298000 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 06:32:05.299440 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 06:32:06.135493 | 2026-06-02 06:32:06.135722 | PLAY [Base post] 2026-06-02 06:32:06.149482 | 2026-06-02 06:32:06.149683 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 06:32:07.019622 | debian-bookworm | changed 2026-06-02 06:32:07.136297 | ubuntu-noble | changed 2026-06-02 06:32:07.158768 | 2026-06-02 06:32:07.158975 | PLAY RECAP 2026-06-02 06:32:07.159072 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 06:32:07.159113 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 06:32:07.159139 | 2026-06-02 06:32:07.296636 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 06:32:07.297979 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 06:32:08.137951 | 2026-06-02 06:32:08.138143 | PLAY [Base post-logs] 2026-06-02 06:32:08.149639 | 2026-06-02 06:32:08.149787 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 06:32:08.649807 | localhost | changed 2026-06-02 06:32:08.665388 | 2026-06-02 06:32:08.665608 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 06:32:08.692283 | localhost | ok 2026-06-02 06:32:08.698047 | 2026-06-02 06:32:08.698197 | TASK [Set zuul-log-path fact] 2026-06-02 06:32:08.727360 | localhost | ok 2026-06-02 06:32:08.742422 | 2026-06-02 06:32:08.742602 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 06:32:08.801831 | localhost | ok 2026-06-02 06:32:08.809290 | 2026-06-02 06:32:08.809459 | TASK [upload-logs : Create log directories] 2026-06-02 06:32:09.332801 | localhost | changed 2026-06-02 06:32:09.336452 | 2026-06-02 06:32:09.336587 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 06:32:09.859122 | localhost -> localhost | ok: Runtime: 0:00:00.012618 2026-06-02 06:32:09.863891 | 2026-06-02 06:32:09.864024 | TASK [upload-logs : Upload logs to log server] 2026-06-02 06:32:10.444030 | localhost | Output suppressed because no_log was given 2026-06-02 06:32:10.446295 | 2026-06-02 06:32:10.446790 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 06:32:10.506744 | localhost | skipping: Conditional result was False 2026-06-02 06:32:10.521809 | localhost | skipping: Conditional result was False 2026-06-02 06:32:10.526723 | 2026-06-02 06:32:10.526927 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 06:32:10.575833 | localhost | skipping: Conditional result was False 2026-06-02 06:32:10.576148 | 2026-06-02 06:32:10.581130 | localhost | skipping: Conditional result was False 2026-06-02 06:32:10.588408 | 2026-06-02 06:32:10.588612 | LOOP [upload-logs : Upload console log and json output]