2026-06-21 20:34:35.402617 | Job console starting 2026-06-21 20:34:35.431683 | Updating git repos 2026-06-21 20:34:35.467267 | Cloning repos into workspace 2026-06-21 20:34:35.508483 | Restoring repo states 2026-06-21 20:34:35.546051 | Merging changes 2026-06-21 20:34:36.154781 | Checking out repos 2026-06-21 20:34:36.230805 | Preparing playbooks 2026-06-21 20:34:37.184161 | Running Ansible setup 2026-06-21 20:34:44.622298 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-21 20:34:45.447395 | 2026-06-21 20:34:45.447651 | PLAY [Base pre] 2026-06-21 20:34:45.468920 | 2026-06-21 20:34:45.469121 | TASK [Setup log path fact] 2026-06-21 20:34:45.501076 | debian-bookworm | ok 2026-06-21 20:34:45.517401 | 2026-06-21 20:34:45.517625 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-21 20:34:45.547958 | debian-bookworm | ok 2026-06-21 20:34:45.562648 | 2026-06-21 20:34:45.562811 | TASK [emit-job-header : Print job information] 2026-06-21 20:34:45.604524 | # Job Information 2026-06-21 20:34:45.604805 | Ansible Version: 2.16.14 2026-06-21 20:34:45.604846 | Job: ansible-collection-services-molecule-auditd 2026-06-21 20:34:45.604882 | Pipeline: check 2026-06-21 20:34:45.604906 | Executor: 521e9411259a 2026-06-21 20:34:45.604927 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2081 2026-06-21 20:34:45.604951 | Event ID: 90b50490-6db0-11f1-8fb8-7596d4ce7f33 2026-06-21 20:34:45.610335 | 2026-06-21 20:34:45.610493 | LOOP [emit-job-header : Print node information] 2026-06-21 20:34:45.737052 | debian-bookworm | ok: 2026-06-21 20:34:45.737356 | debian-bookworm | # Node Information 2026-06-21 20:34:45.737395 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-21 20:34:45.737423 | debian-bookworm | Hostname: debian 2026-06-21 20:34:45.737447 | debian-bookworm | Username: zuul 2026-06-21 20:34:45.737512 | debian-bookworm | Distro: Debian 12.14 2026-06-21 20:34:45.737548 | debian-bookworm | Provider: regiocloud-a 2026-06-21 20:34:45.737571 | debian-bookworm | Region: 2026-06-21 20:34:45.737593 | debian-bookworm | Label: debian-bookworm 2026-06-21 20:34:45.737615 | debian-bookworm | Product Name: OpenStack Nova 2026-06-21 20:34:45.737635 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe4c:7d28 2026-06-21 20:34:45.775462 | debian-bookworm | ok: 2026-06-21 20:34:45.775688 | debian-bookworm | # Node Information 2026-06-21 20:34:45.775737 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-21 20:34:45.775770 | debian-bookworm | Hostname: ubuntu 2026-06-21 20:34:45.775803 | debian-bookworm | Username: zuul 2026-06-21 20:34:45.775831 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-21 20:34:45.775857 | debian-bookworm | Provider: regiocloud-a 2026-06-21 20:34:45.775883 | debian-bookworm | Region: 2026-06-21 20:34:45.775909 | debian-bookworm | Label: ubuntu-noble 2026-06-21 20:34:45.775934 | debian-bookworm | Product Name: OpenStack Nova 2026-06-21 20:34:45.775959 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:feef:da7c 2026-06-21 20:34:45.792499 | 2026-06-21 20:34:45.792671 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-21 20:34:46.385165 | debian-bookworm -> localhost | changed 2026-06-21 20:34:46.394317 | 2026-06-21 20:34:46.394492 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-21 20:34:47.697020 | debian-bookworm -> localhost | changed 2026-06-21 20:34:47.708768 | ubuntu-noble -> localhost | ok 2026-06-21 20:34:47.726239 | 2026-06-21 20:34:47.726410 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-21 20:34:48.015461 | debian-bookworm -> localhost | ok 2026-06-21 20:34:48.022456 | 2026-06-21 20:34:48.022610 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-21 20:34:48.061381 | debian-bookworm | ok 2026-06-21 20:34:48.073036 | ubuntu-noble | ok 2026-06-21 20:34:48.104102 | debian-bookworm | included: /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-21 20:34:48.104274 | ubuntu-noble | included: /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-21 20:34:48.112190 | 2026-06-21 20:34:48.112329 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-21 20:34:49.594690 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-21 20:34:49.595294 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/f6397b7ef3314158a8c9a7e89cc507c6_id_rsa 2026-06-21 20:34:49.595412 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/f6397b7ef3314158a8c9a7e89cc507c6_id_rsa.pub 2026-06-21 20:34:49.595521 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-21 20:34:49.595597 | debian-bookworm -> localhost | SHA256:+/urgMsozSHjM+XAzhrgSJMrD06GjRb+JXFJp5ePEX0 zuul-build-sshkey 2026-06-21 20:34:49.595669 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-21 20:34:49.595749 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-21 20:34:49.595817 | debian-bookworm -> localhost | | | 2026-06-21 20:34:49.595881 | debian-bookworm -> localhost | | . | 2026-06-21 20:34:49.595943 | debian-bookworm -> localhost | | . o . E | 2026-06-21 20:34:49.596002 | debian-bookworm -> localhost | | . . + o . | 2026-06-21 20:34:49.596060 | debian-bookworm -> localhost | |.* . + +S | 2026-06-21 20:34:49.596116 | debian-bookworm -> localhost | |BoO = ..+. | 2026-06-21 20:34:49.596174 | debian-bookworm -> localhost | |B@.X o..o. | 2026-06-21 20:34:49.596232 | debian-bookworm -> localhost | |*+O *o . o | 2026-06-21 20:34:49.596289 | debian-bookworm -> localhost | |.o.=. o ++o. | 2026-06-21 20:34:49.596345 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-21 20:34:49.596505 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.925455 2026-06-21 20:34:49.610753 | 2026-06-21 20:34:49.611048 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-21 20:34:49.647304 | debian-bookworm | ok 2026-06-21 20:34:49.662567 | ubuntu-noble | ok 2026-06-21 20:34:49.679323 | debian-bookworm | included: /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-21 20:34:49.679427 | ubuntu-noble | included: /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-21 20:34:49.690702 | 2026-06-21 20:34:49.690814 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-21 20:34:49.718417 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:34:49.719756 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:34:49.726026 | 2026-06-21 20:34:49.726140 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-21 20:34:50.441085 | ubuntu-noble | changed 2026-06-21 20:34:50.449122 | debian-bookworm | changed 2026-06-21 20:34:50.457062 | 2026-06-21 20:34:50.457212 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-21 20:34:50.749447 | debian-bookworm | ok 2026-06-21 20:34:50.767985 | ubuntu-noble | ok 2026-06-21 20:34:50.778542 | 2026-06-21 20:34:50.778746 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-21 20:34:51.494223 | debian-bookworm | changed 2026-06-21 20:34:51.523995 | ubuntu-noble | changed 2026-06-21 20:34:51.532098 | 2026-06-21 20:34:51.532267 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-21 20:34:52.298958 | debian-bookworm | changed 2026-06-21 20:34:52.304072 | ubuntu-noble | changed 2026-06-21 20:34:52.309732 | 2026-06-21 20:34:52.309847 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-21 20:34:52.337669 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:34:52.348826 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:34:52.356414 | 2026-06-21 20:34:52.356627 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-21 20:34:52.827939 | debian-bookworm -> localhost | changed 2026-06-21 20:34:52.845599 | 2026-06-21 20:34:52.845759 | TASK [add-build-sshkey : Add back temp key] 2026-06-21 20:34:53.252194 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/f6397b7ef3314158a8c9a7e89cc507c6_id_rsa (zuul-build-sshkey) 2026-06-21 20:34:53.252605 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.014090 2026-06-21 20:34:53.262974 | 2026-06-21 20:34:53.263175 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-21 20:34:53.675755 | ubuntu-noble | ok 2026-06-21 20:34:53.701695 | debian-bookworm | ok 2026-06-21 20:34:53.707187 | 2026-06-21 20:34:53.707307 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-21 20:34:53.744919 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:34:53.757187 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:34:53.784735 | 2026-06-21 20:34:53.784942 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-21 20:34:54.208583 | debian-bookworm | ok 2026-06-21 20:34:54.213861 | ubuntu-noble | ok 2026-06-21 20:34:54.229199 | 2026-06-21 20:34:54.229317 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-21 20:34:54.271971 | debian-bookworm | ok 2026-06-21 20:34:54.277341 | ubuntu-noble | ok 2026-06-21 20:34:54.282568 | 2026-06-21 20:34:54.282673 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-21 20:34:54.605961 | debian-bookworm -> localhost | ok 2026-06-21 20:34:54.621140 | 2026-06-21 20:34:54.621334 | TASK [validate-host : Collect information about the host] 2026-06-21 20:34:55.814536 | debian-bookworm | ok 2026-06-21 20:34:55.841084 | ubuntu-noble | ok 2026-06-21 20:34:55.852019 | 2026-06-21 20:34:55.852231 | TASK [validate-host : Sanitize hostname] 2026-06-21 20:34:55.934946 | ubuntu-noble | ok 2026-06-21 20:34:55.942707 | debian-bookworm | ok 2026-06-21 20:34:55.948928 | 2026-06-21 20:34:55.949048 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-21 20:34:56.567535 | debian-bookworm -> localhost | changed 2026-06-21 20:34:56.629870 | ubuntu-noble -> localhost | changed 2026-06-21 20:34:56.636358 | 2026-06-21 20:34:56.636553 | TASK [validate-host : Collect information about zuul worker] 2026-06-21 20:34:57.146331 | debian-bookworm | ok 2026-06-21 20:34:57.197794 | ubuntu-noble | ok 2026-06-21 20:34:57.206172 | 2026-06-21 20:34:57.206352 | TASK [validate-host : Write out all zuul information for each host] 2026-06-21 20:34:57.790421 | debian-bookworm -> localhost | changed 2026-06-21 20:34:57.843640 | ubuntu-noble -> localhost | changed 2026-06-21 20:34:57.857977 | 2026-06-21 20:34:57.858133 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-21 20:34:58.169106 | debian-bookworm | ok 2026-06-21 20:34:58.194911 | ubuntu-noble | ok 2026-06-21 20:34:58.205873 | 2026-06-21 20:34:58.206074 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-21 20:34:59.457999 | debian-bookworm | changed: 2026-06-21 20:34:59.458329 | debian-bookworm | cd+++++++++ src/ 2026-06-21 20:34:59.458367 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-21 20:34:59.458393 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-21 20:34:59.458415 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-21 20:34:59.458436 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:36:48.209212 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:36:48.238607 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:36:48.901863 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:36:48.902698 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:36:48.925529 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:36:48.931182 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-21 20:36:48.931227 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:36:48.710489 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:36:48.711063 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:36:48.728338 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:36:48.732766 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-21 20:36:48.732833 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:36:49.813508 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-21 20:36:49.813958 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-21 20:36:50.323679 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-21 20:36:50.324256 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-21 20:36:50.133222 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-06-21 20:36:50.133719 | debian-bookworm | config file = None 2026-06-21 20:36:50.134133 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-21 20:36:50.134594 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-21 20:36:50.135028 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-21 20:36:50.135362 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-21 20:36:50.135696 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-21 20:36:50.136052 | debian-bookworm | jinja version = 3.1.6 2026-06-21 20:36:50.136349 | debian-bookworm | libyaml = True 2026-06-21 20:36:50.136698 | debian-bookworm | No config file found; using defaults 2026-06-21 20:36:50.137152 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-21 20:36:50.138559 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-21 20:36:50.138967 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-21 20:36:50.139312 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-21 20:36:50.139670 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-21 20:36:50.140348 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-21 20:36:50.140780 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-21 20:36:50.141184 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-21 20:36:50.141521 | debian-bookworm | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-21 20:36:50.142174 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-21 20:36:50.142446 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-21 20:36:50.142922 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-21 20:36:50.143192 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-21 20:36:50.143459 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-21 20:36:50.143838 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-21 20:36:50.144107 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-21 20:36:50.144346 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-21 20:36:50.144805 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-21 20:36:50.145033 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-21 20:36:50.146170 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-21 20:36:50.146452 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-21 20:36:50.147016 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-21 20:36:50.147343 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-21 20:36:50.147531 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-21 20:36:50.147830 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-21 20:36:50.148012 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-21 20:36:50.148232 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-21 20:36:50.148469 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-21 20:36:50.148722 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-21 20:36:50.149421 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-21 20:36:50.149635 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-21 20:36:50.150464 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-21 20:36:50.150690 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-21 20:36:50.151012 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-21 20:36:50.151230 | debian-bookworm | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-21 20:36:50.151445 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-21 20:36:50.151671 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-21 20:36:50.151911 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-21 20:36:50.152122 | debian-bookworm | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-21 20:36:50.152478 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-21 20:36:50.152725 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-21 20:36:50.152935 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-21 20:36:50.153211 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-21 20:36:50.156642 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-21 20:36:50.156866 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-21 20:36:50.157164 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-21 20:36:50.157378 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-21 20:36:50.157590 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-21 20:36:50.157912 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-21 20:36:50.158131 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-21 20:36:50.158375 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-21 20:36:50.158589 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-21 20:36:50.158828 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-21 20:36:50.159041 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-21 20:36:50.159299 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-21 20:36:50.159585 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-21 20:36:50.159789 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-21 20:36:50.161127 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-21 20:36:50.161523 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-21 20:36:50.161891 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-21 20:36:50.162134 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-21 20:36:50.162575 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-21 20:36:50.162912 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-21 20:36:50.164305 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-21 20:36:50.164862 | debian-bookworm | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-21 20:36:50.165158 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-21 20:36:50.165550 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-21 20:36:50.165887 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-21 20:36:50.166302 | debian-bookworm | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-21 20:36:50.166763 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-21 20:36:50.167059 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-21 20:36:50.168048 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-21 20:36:50.168609 | debian-bookworm | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-21 20:36:50.169094 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-21 20:36:50.169458 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-21 20:36:50.169832 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-21 20:36:50.170090 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-21 20:36:50.171537 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-21 20:36:50.171836 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-21 20:36:50.172163 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-21 20:36:50.172429 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-21 20:36:50.172974 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-21 20:36:50.173243 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-21 20:36:50.173513 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-21 20:36:50.173803 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-21 20:36:50.174397 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-21 20:36:50.174695 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-21 20:36:50.175632 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-21 20:36:50.175884 | debian-bookworm | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-21 20:36:50.177705 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-21 20:36:50.177945 | debian-bookworm | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-21 20:36:50.179099 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-21 20:36:50.179335 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-21 20:36:50.179564 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-21 20:36:50.179817 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-21 20:36:50.214499 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-21 20:36:50.215024 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-21 20:36:50.215497 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-21 20:36:50.215894 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-21 20:36:50.216303 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-21 20:36:50.216670 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-21 20:36:50.216976 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-21 20:36:50.217418 | debian-bookworm | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-21 20:36:50.217860 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-21 20:36:50.218210 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-21 20:36:50.218568 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-21 20:36:50.218840 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-21 20:36:50.219088 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-21 20:36:50.219430 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-21 20:36:50.219690 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-21 20:36:50.219943 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-21 20:36:50.220271 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-21 20:36:50.220579 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-21 20:36:50.221779 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-21 20:36:50.222304 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-21 20:36:50.222709 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-21 20:36:50.223087 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-21 20:36:50.223416 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-21 20:36:50.223871 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-21 20:36:50.224268 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-21 20:36:50.224612 | debian-bookworm | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-21 20:36:50.224952 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-21 20:36:50.225380 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-21 20:36:50.225839 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-21 20:36:50.226143 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-21 20:36:50.226594 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-21 20:36:50.226920 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-21 20:36:50.227201 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-21 20:36:50.227481 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-21 20:36:50.227785 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-21 20:36:50.228186 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-21 20:36:50.228476 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-21 20:36:50.228835 | debian-bookworm | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-21 20:36:50.229110 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-21 20:36:50.229410 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-21 20:36:50.229845 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-21 20:36:50.230123 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-21 20:36:50.230403 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-21 20:36:50.230741 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-21 20:36:50.231220 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-21 20:36:50.231505 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-21 20:36:50.232006 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-21 20:36:50.232267 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-21 20:36:50.232855 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-21 20:36:50.233327 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-21 20:36:50.233913 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-21 20:36:50.234249 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-21 20:36:50.234453 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-21 20:36:50.234743 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-21 20:36:50.235095 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-21 20:36:50.235446 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-21 20:36:50.235972 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-21 20:36:50.236217 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-21 20:36:50.238148 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-21 20:36:50.238378 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-21 20:36:50.238729 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-21 20:36:50.238958 | debian-bookworm | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-21 20:36:50.239188 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-21 20:36:50.239413 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-21 20:36:50.242752 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-21 20:36:50.243003 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-21 20:36:50.243236 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-21 20:36:50.243493 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-21 20:36:50.243762 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-21 20:36:50.244007 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-21 20:36:50.244255 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-21 20:36:50.244543 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-21 20:36:50.244814 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-21 20:36:50.245065 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-21 20:36:50.245747 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-21 20:36:50.245976 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-21 20:36:50.246946 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-21 20:36:50.247465 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-21 20:36:50.247808 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-21 20:36:50.248174 | debian-bookworm | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-21 20:36:50.248584 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-21 20:36:50.248904 | debian-bookworm | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-21 20:36:50.249599 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-21 20:36:50.249984 | debian-bookworm | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-21 20:36:50.258330 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-21 20:36:50.258717 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-21 20:36:50.259073 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-21 20:36:50.259326 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-21 20:36:50.264486 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-21 20:36:50.264880 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-21 20:36:50.267153 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-21 20:36:50.267508 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-21 20:36:50.267885 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-21 20:36:50.268259 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-21 20:36:50.268540 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-21 20:36:50.268924 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-21 20:36:50.269373 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-21 20:36:50.269736 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-21 20:36:50.271281 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-21 20:36:50.271587 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-21 20:36:50.271812 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-21 20:36:50.272084 | debian-bookworm | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-21 20:36:50.276292 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-21 20:36:50.276599 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-21 20:36:50.280427 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-21 20:36:50.281019 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-21 20:36:50.281333 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-21 20:36:50.735945 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-06-21 20:36:50.738066 | ubuntu-noble | config file = None 2026-06-21 20:36:50.738103 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-21 20:36:50.738110 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-21 20:36:50.738517 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-21 20:36:50.739003 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-21 20:36:50.739467 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-21 20:36:50.739893 | ubuntu-noble | jinja version = 3.1.6 2026-06-21 20:36:50.740189 | ubuntu-noble | libyaml = True 2026-06-21 20:36:50.740572 | ubuntu-noble | No config file found; using defaults 2026-06-21 20:36:50.741294 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-21 20:36:50.750140 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-21 20:36:50.750563 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-21 20:36:50.762233 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-21 20:36:50.762696 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-21 20:36:50.763116 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-21 20:36:50.763536 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-21 20:36:50.764216 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-21 20:36:50.764709 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-21 20:36:50.765243 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-21 20:36:50.765563 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-21 20:36:50.766000 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-21 20:36:50.766330 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-21 20:36:50.766744 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-21 20:36:50.767076 | ubuntu-noble | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-21 20:36:50.767501 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-21 20:36:50.767998 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-21 20:36:50.768370 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-21 20:36:50.768667 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-21 20:36:50.769035 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-21 20:36:50.769321 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-21 20:36:50.769685 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-21 20:36:50.769951 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-21 20:36:50.770320 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-21 20:36:50.770579 | ubuntu-noble | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-21 20:36:50.771881 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-21 20:36:50.772177 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-21 20:36:50.772448 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-21 20:36:50.772742 | ubuntu-noble | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-21 20:36:50.774647 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-21 20:36:50.774921 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-21 20:36:50.776060 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-21 20:36:50.776083 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-21 20:36:50.777730 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-21 20:36:50.777999 | ubuntu-noble | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-21 20:36:50.778375 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-21 20:36:50.778688 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-21 20:36:50.809125 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-21 20:36:50.810075 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-21 20:36:50.810517 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-21 20:36:50.810842 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-21 20:36:50.811384 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-21 20:36:50.811779 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-21 20:36:50.812256 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-21 20:36:50.812547 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-21 20:36:50.812869 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-21 20:36:50.813422 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-21 20:36:50.859100 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-21 20:36:50.861067 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-21 20:36:50.861105 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-21 20:36:50.861111 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-21 20:36:50.861188 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-21 20:36:50.861633 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-21 20:36:50.862561 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-21 20:36:50.862982 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-21 20:36:50.863359 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-21 20:36:50.863854 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-21 20:36:50.864188 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-21 20:36:50.864480 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-21 20:36:50.864788 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-21 20:36:50.865132 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-21 20:36:50.866412 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-21 20:36:50.866722 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-21 20:36:50.866999 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-21 20:36:50.867432 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-21 20:36:50.867852 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-21 20:36:50.868278 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-21 20:36:50.869690 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-21 20:36:50.870045 | ubuntu-noble | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-21 20:36:50.870490 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-21 20:36:50.870786 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-21 20:36:50.871341 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-21 20:36:50.871746 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-21 20:36:50.872834 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-21 20:36:50.873270 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-21 20:36:50.873911 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-21 20:36:50.874188 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-21 20:36:50.875349 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-21 20:36:50.875588 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-21 20:36:50.876282 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-21 20:36:50.876634 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-21 20:36:50.879133 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-21 20:36:50.879477 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-21 20:36:50.880758 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-21 20:36:50.881153 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-21 20:36:50.881496 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-21 20:36:50.881833 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-21 20:36:50.884106 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-21 20:36:50.884153 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-21 20:36:50.884185 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-21 20:36:50.884192 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-21 20:36:50.884800 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-21 20:36:50.884818 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-21 20:36:50.886718 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-21 20:36:50.887008 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-21 20:36:50.887577 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-21 20:36:50.887593 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-21 20:36:50.888842 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-21 20:36:50.888870 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-21 20:36:50.888877 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-21 20:36:50.889167 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-21 20:36:50.889458 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-21 20:36:50.889811 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-21 20:36:50.890161 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-21 20:36:50.890444 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-21 20:36:50.890901 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-21 20:36:50.891190 | ubuntu-noble | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-21 20:36:50.892971 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-21 20:36:50.893288 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-21 20:36:50.896447 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-21 20:36:50.896807 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-21 20:36:50.906669 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-21 20:36:50.907350 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-21 20:36:50.907378 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-21 20:36:50.907690 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-21 20:36:50.911565 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-21 20:36:50.912202 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-21 20:36:50.912230 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-21 20:36:50.912470 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-21 20:36:50.912826 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-21 20:36:50.913109 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-21 20:36:50.915225 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-21 20:36:50.915502 | ubuntu-noble | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-21 20:36:50.916817 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-21 20:36:50.917114 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-21 20:36:50.917371 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-21 20:36:50.917678 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-21 20:36:50.918443 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-21 20:36:50.918464 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-21 20:36:50.918764 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-21 20:36:50.919256 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-21 20:36:50.919279 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-21 20:36:50.919512 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-21 20:36:50.919799 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-21 20:36:50.920073 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-21 20:36:50.920337 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-21 20:36:50.920592 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-21 20:36:50.921402 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-21 20:36:50.923060 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-21 20:36:50.923099 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-21 20:36:50.923128 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-21 20:36:50.923144 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-21 20:36:50.923151 | ubuntu-noble | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-21 20:36:50.923157 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-21 20:36:50.923354 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-21 20:36:50.923573 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-21 20:36:50.923900 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-21 20:36:50.925209 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-21 20:36:50.925494 | ubuntu-noble | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-21 20:36:50.926267 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-21 20:36:50.926532 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-21 20:36:50.926805 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-21 20:36:50.927082 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-21 20:36:50.927349 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-21 20:36:50.927623 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-21 20:36:50.928301 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-21 20:36:50.928723 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-21 20:36:50.929292 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-21 20:36:50.929572 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-21 20:36:50.930010 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-21 20:36:50.930332 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-21 20:36:50.930606 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-21 20:36:50.930851 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-21 20:36:50.931141 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-21 20:36:50.931371 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-21 20:36:50.931658 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-21 20:36:50.931946 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-21 20:36:50.934216 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-21 20:36:50.934803 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-21 20:36:50.938116 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-21 20:36:50.938598 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-21 20:36:50.941071 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-21 20:36:50.941109 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-21 20:36:50.941121 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-21 20:36:50.941131 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-21 20:36:50.941143 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-21 20:36:50.941320 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-21 20:36:50.942016 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-21 20:36:50.942468 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-21 20:36:50.942807 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-21 20:36:50.943228 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-21 20:36:50.943641 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-21 20:36:50.944060 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-21 20:36:50.944383 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-21 20:36:50.944805 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-21 20:36:50.945149 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-21 20:36:50.945485 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-21 20:36:50.945903 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-21 20:36:50.946241 | ubuntu-noble | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-21 20:36:50.946558 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-21 20:36:50.946913 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-21 20:36:50.949128 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-21 20:36:50.949498 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-21 20:36:50.949852 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-21 20:36:50.950201 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-21 20:36:50.950519 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-21 20:36:50.950847 | ubuntu-noble | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-21 20:36:50.951182 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-21 20:36:50.951509 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-21 20:36:50.955975 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-21 20:36:50.956471 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-21 20:36:50.956790 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-21 20:36:51.182813 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-21 20:36:51.183474 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-21 20:36:51.563562 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-21 20:36:51.564029 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-21 20:36:51.988066 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-21 20:36:52.239844 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-21 20:36:52.851662 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-21 20:36:53.392874 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-21 20:36:53.392947 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-21 20:36:53.369932 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-21 20:36:55.478531 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-21 20:36:55.478604 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-21 20:36:55.640119 | ubuntu-noble | Starting galaxy collection install process 2026-06-21 20:36:55.640434 | ubuntu-noble | Process install dependency map 2026-06-21 20:36:55.640841 | ubuntu-noble | Starting collection install process 2026-06-21 20:36:55.641242 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-21 20:36:55.642081 | ubuntu-noble | 'community.docker:4.8.5' is already installed, skipping. 2026-06-21 20:36:55.642113 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-21 20:36:55.642403 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-21 20:36:55.642850 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-29909fuhp8c9/tmpro14zru2/osism-commons-0.20260601.0-tioqzvg6 2026-06-21 20:36:55.643247 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-21 20:36:55.643595 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-21 20:36:55.701884 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-21 20:36:55.704241 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-21 20:36:55.704275 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-21 20:36:56.750708 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-21 20:36:56.751014 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-21 20:36:58.079551 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-21 20:36:58.080154 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-21 20:36:58.257089 | debian-bookworm | Starting galaxy collection install process 2026-06-21 20:36:58.257227 | debian-bookworm | Process install dependency map 2026-06-21 20:36:58.257249 | debian-bookworm | Starting collection install process 2026-06-21 20:36:58.257344 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-21 20:36:58.257440 | debian-bookworm | 'community.docker:4.8.5' is already installed, skipping. 2026-06-21 20:36:58.257544 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-21 20:36:58.257648 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-21 20:36:58.257758 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-2335d6l01ex0/tmp8pr5ci1x/osism-commons-0.20260601.0-72dta4mq 2026-06-21 20:36:58.257858 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-21 20:36:58.257956 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-21 20:36:58.352039 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-21 20:36:58.352571 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-21 20:36:58.353367 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-21 20:36:58.636690 | ubuntu-noble | ok: Runtime: 0:00:07.817356 2026-06-21 20:36:58.656973 | debian-bookworm | ok: Runtime: 0:00:10.566579 2026-06-21 20:36:58.670644 | 2026-06-21 20:36:58.670810 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-21 20:36:59.229971 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:36:59.231761 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:36:59.245165 | 2026-06-21 20:36:59.245345 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-21 20:36:59.897706 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:36:59.907417 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:36:59.904386 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:36:59.914807 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:00.352689 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:00.353289 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:00.374320 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:00.379830 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-21 20:37:00.379897 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:00.391610 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:00.392275 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:00.411997 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:00.417706 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-21 20:37:00.417780 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:01.578626 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-21 20:37:01.657578 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-21 20:37:01.894307 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-21 20:37:01.894361 | ubuntu-noble | config file = None 2026-06-21 20:37:01.894374 | ubuntu-noble | configured module search path = 2026-06-21 20:37:01.894380 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-21 20:37:01.894385 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-21 20:37:01.894389 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-21 20:37:01.894393 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-21 20:37:01.894397 | ubuntu-noble | jinja version = 3.1.6 2026-06-21 20:37:01.894400 | ubuntu-noble | libyaml = True 2026-06-21 20:37:01.894683 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:01.894688 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:01.894692 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:01.894696 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:01.894699 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:01.894703 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-21 20:37:01.894706 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:01.894710 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:01.894713 | ubuntu-noble | 2026-06-21 20:37:01.894920 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:01.894925 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-21 20:37:01.894928 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:01.894932 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:01.894935 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:01.894938 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:01.894942 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:01.894945 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:01.894949 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:01.894953 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:01.894956 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:01.894959 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:01.894963 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:01.894966 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:01.894970 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:01.894973 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:01.894977 | ubuntu-noble | 2026-06-21 20:37:01.895392 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:02.178077 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-21 20:37:01.999636 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-21 20:37:01.999784 | debian-bookworm | config file = None 2026-06-21 20:37:01.999831 | debian-bookworm | configured module search path = 2026-06-21 20:37:01.999847 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-21 20:37:01.999867 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-21 20:37:01.999879 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-21 20:37:01.999891 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-21 20:37:01.999902 | debian-bookworm | jinja version = 3.1.6 2026-06-21 20:37:01.999913 | debian-bookworm | libyaml = True 2026-06-21 20:37:01.999937 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:01.999950 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:01.999961 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:01.999972 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:01.999983 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:01.999994 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-21 20:37:02.000005 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:02.000016 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:02.000027 | debian-bookworm | 2026-06-21 20:37:02.000039 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:02.000050 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-21 20:37:02.000062 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:02.000072 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:02.000083 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:02.000094 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:02.000106 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:02.000117 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:02.000128 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:02.000140 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:02.000152 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:02.000162 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:02.000174 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:02.000184 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:02.000195 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:02.000206 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:02.000217 | debian-bookworm | 2026-06-21 20:37:02.000245 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:02.292988 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-21 20:37:02.437257 | ubuntu-noble | 2026-06-21 20:37:02.437690 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-21 20:37:02.437998 | ubuntu-noble | 2026-06-21 20:37:02.438387 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-21 20:37:02.586028 | debian-bookworm | 2026-06-21 20:37:02.586721 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-21 20:37:02.587334 | debian-bookworm | 2026-06-21 20:37:02.587803 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-21 20:37:03.604958 | ubuntu-noble | ok: [molecule-auditd] 2026-06-21 20:37:03.605086 | ubuntu-noble | 2026-06-21 20:37:03.605174 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-21 20:37:03.719420 | debian-bookworm | ok: [molecule-auditd] 2026-06-21 20:37:03.719558 | debian-bookworm | 2026-06-21 20:37:03.719783 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-21 20:37:07.863385 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.9 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.9 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:07.864068 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.6 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.6 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:07.867065 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:07.867093 | ubuntu-noble | 2026-06-21 20:37:07.867100 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-21 20:37:07.890115 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-21 20:37:07.890140 | ubuntu-noble | 2026-06-21 20:37:07.890146 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-21 20:37:07.890151 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-21 20:37:07.890159 | ubuntu-noble | 2026-06-21 20:37:07.955524 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-21 20:37:07.956271 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-21 20:37:08.530985 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.5 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.5 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.6.17)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:08.531272 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.9 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.9 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:08.531424 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.6.17)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-21 20:37:08.531531 | debian-bookworm | 2026-06-21 20:37:08.531651 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-21 20:37:08.552540 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-21 20:37:08.552646 | debian-bookworm | 2026-06-21 20:37:08.552792 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-21 20:37:08.552936 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-21 20:37:08.553028 | debian-bookworm | 2026-06-21 20:37:08.656410 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-21 20:37:08.657050 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-21 20:37:08.812301 | ubuntu-noble | ok: Runtime: 0:00:08.416041 2026-06-21 20:37:08.818571 | debian-bookworm | ok: Runtime: 0:00:09.165958 2026-06-21 20:37:08.825053 | 2026-06-21 20:37:08.825192 | TASK [ansible-molecule : Reset connection] 2026-06-21 20:37:08.880653 | 2026-06-21 20:37:08.880870 | TASK [ansible-molecule : Reset connection] 2026-06-21 20:37:08.922328 | 2026-06-21 20:37:08.922545 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-21 20:37:09.803077 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:37:09.811379 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:09.814224 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:37:09.825434 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:10.289961 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:10.290713 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:10.313035 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:10.318491 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-21 20:37:10.318646 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:10.464780 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:10.464936 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:10.487194 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:10.495829 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-21 20:37:10.496009 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:11.588977 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-21 20:37:11.589686 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-21 20:37:11.954082 | ubuntu-noble | ansible-galaxy [core 2.18.18] 2026-06-21 20:37:11.957071 | ubuntu-noble | config file = None 2026-06-21 20:37:11.957123 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-21 20:37:11.957139 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-21 20:37:11.957166 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-21 20:37:11.957185 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-21 20:37:11.957197 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-21 20:37:11.957207 | ubuntu-noble | jinja version = 3.1.6 2026-06-21 20:37:11.957217 | ubuntu-noble | libyaml = True 2026-06-21 20:37:11.957786 | ubuntu-noble | No config file found; using defaults 2026-06-21 20:37:11.958216 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-21 20:37:11.783586 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-21 20:37:11.783943 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-21 20:37:11.976499 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-21 20:37:11.976972 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-21 20:37:11.977406 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-21 20:37:11.978653 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-21 20:37:11.989451 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-21 20:37:11.989960 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-21 20:37:11.990443 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-21 20:37:11.990846 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-21 20:37:11.992014 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-21 20:37:11.992452 | ubuntu-noble | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-21 20:37:11.992927 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-21 20:37:11.993390 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-21 20:37:11.993733 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-21 20:37:11.994146 | ubuntu-noble | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-21 20:37:11.994462 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-21 20:37:11.994894 | ubuntu-noble | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-21 20:37:11.995231 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-21 20:37:11.995549 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-21 20:37:11.998365 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-21 20:37:11.998721 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-21 20:37:11.999073 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-21 20:37:11.999401 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-21 20:37:11.999744 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-21 20:37:12.000083 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-21 20:37:12.000778 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-21 20:37:12.001159 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-21 20:37:12.001441 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-21 20:37:12.001809 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-21 20:37:12.002106 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-21 20:37:12.002468 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-21 20:37:12.018332 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-21 20:37:12.018775 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-21 20:37:12.019191 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-21 20:37:12.019507 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-21 20:37:12.019915 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-21 20:37:12.020248 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-21 20:37:12.020554 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-21 20:37:12.020990 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-21 20:37:12.022522 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-21 20:37:12.022987 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-21 20:37:12.023290 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-21 20:37:12.023649 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-21 20:37:12.024647 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-21 20:37:12.024982 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-21 20:37:12.025872 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-21 20:37:12.026228 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-21 20:37:12.026816 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-21 20:37:12.027200 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-21 20:37:12.029397 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-21 20:37:12.029427 | ubuntu-noble | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-21 20:37:12.041089 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-21 20:37:12.041155 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-21 20:37:12.041437 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-21 20:37:12.041971 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-21 20:37:12.042548 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-21 20:37:12.042965 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-21 20:37:12.043310 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-21 20:37:12.043644 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-21 20:37:12.044082 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-21 20:37:12.044400 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-21 20:37:12.044729 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-21 20:37:12.045132 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-21 20:37:12.045575 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-21 20:37:12.045956 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-21 20:37:12.046338 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-21 20:37:12.046694 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-21 20:37:12.047076 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-21 20:37:12.047529 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-21 20:37:12.047917 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-21 20:37:12.048270 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-21 20:37:12.048591 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-21 20:37:12.048928 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-21 20:37:12.049264 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-21 20:37:12.051066 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-21 20:37:12.051100 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-21 20:37:12.051114 | ubuntu-noble | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-21 20:37:12.051126 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-21 20:37:12.051139 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-21 20:37:12.051153 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-21 20:37:12.051375 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-21 20:37:12.051804 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-21 20:37:12.052101 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-21 20:37:12.052420 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-21 20:37:12.052746 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-21 20:37:12.053106 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-21 20:37:12.053331 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-21 20:37:12.053544 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-21 20:37:12.053768 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-21 20:37:12.053977 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-21 20:37:12.054225 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-21 20:37:12.090675 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-21 20:37:12.091315 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-21 20:37:12.091765 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-21 20:37:12.092318 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-21 20:37:12.092721 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-21 20:37:12.093103 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-21 20:37:12.093836 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-21 20:37:12.094204 | ubuntu-noble | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-21 20:37:12.094530 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-21 20:37:12.094873 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-21 20:37:12.095145 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-21 20:37:12.095475 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-21 20:37:12.095743 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-21 20:37:12.096082 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-21 20:37:12.096402 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-21 20:37:12.096675 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-21 20:37:12.096989 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-21 20:37:12.097257 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-21 20:37:12.099215 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-21 20:37:12.099548 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-21 20:37:12.100581 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-21 20:37:12.100630 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-21 20:37:12.102398 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-21 20:37:12.102421 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-21 20:37:12.102429 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-21 20:37:12.102449 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-21 20:37:12.104045 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-21 20:37:12.104066 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-21 20:37:12.104074 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-21 20:37:12.104081 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-21 20:37:12.104088 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-21 20:37:12.104096 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-21 20:37:12.104370 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-21 20:37:12.104615 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-21 20:37:12.104905 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-21 20:37:12.105153 | ubuntu-noble | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-21 20:37:12.105446 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-21 20:37:12.105726 | ubuntu-noble | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-21 20:37:12.106044 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-21 20:37:12.106279 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-21 20:37:12.106490 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-21 20:37:12.106772 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-21 20:37:12.106985 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-21 20:37:12.107221 | ubuntu-noble | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-21 20:37:12.107436 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-21 20:37:12.107737 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-21 20:37:12.107958 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-21 20:37:12.108188 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-21 20:37:12.108404 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-21 20:37:12.108710 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-21 20:37:12.109830 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-21 20:37:12.110108 | ubuntu-noble | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-21 20:37:12.110362 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-21 20:37:12.110566 | ubuntu-noble | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-21 20:37:12.111439 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-21 20:37:12.111714 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-21 20:37:12.111961 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-21 20:37:12.112228 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-21 20:37:12.112521 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-21 20:37:12.112785 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-21 20:37:12.113593 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-21 20:37:12.113863 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-21 20:37:12.119446 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-21 20:37:12.119689 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-21 20:37:12.120069 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-21 20:37:12.120306 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-21 20:37:12.121347 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-21 20:37:12.121588 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-21 20:37:12.121833 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-21 20:37:12.122089 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-21 20:37:12.122478 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-21 20:37:12.122727 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-21 20:37:12.123011 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-21 20:37:12.123295 | ubuntu-noble | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-21 20:37:12.126939 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-21 20:37:12.126965 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-21 20:37:12.127823 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-21 20:37:12.127846 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-21 20:37:12.127852 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-21 20:37:12.128091 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-21 20:37:12.128376 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-21 20:37:12.128620 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-21 20:37:12.128849 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-21 20:37:12.129095 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-21 20:37:12.129648 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-21 20:37:12.129878 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-21 20:37:12.130111 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-21 20:37:12.130331 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-21 20:37:12.131815 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-21 20:37:12.132059 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-21 20:37:12.132278 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-21 20:37:12.132493 | ubuntu-noble | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-21 20:37:12.133194 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-21 20:37:12.133429 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-21 20:37:12.133826 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-21 20:37:12.134062 | ubuntu-noble | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-21 20:37:12.134300 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-21 20:37:12.134517 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-21 20:37:12.134974 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-21 20:37:12.135183 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-21 20:37:12.135564 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-21 20:37:12.135580 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-21 20:37:12.136551 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-21 20:37:12.136761 | ubuntu-noble | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-21 20:37:12.137391 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-21 20:37:12.137625 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-21 20:37:12.137964 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-21 20:37:12.138172 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-21 20:37:12.138732 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-21 20:37:12.138748 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-21 20:37:12.139476 | ubuntu-noble | Starting galaxy collection install process 2026-06-21 20:37:12.139492 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-21 20:37:12.191863 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-21 20:37:12.194094 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-21 20:37:12.209852 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-21 20:37:12.212473 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-21 20:37:12.221650 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-21 20:37:12.221779 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-21 20:37:12.221870 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-21 20:37:12.229341 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-21 20:37:12.154945 | debian-bookworm | ansible-galaxy [core 2.18.18] 2026-06-21 20:37:12.159165 | debian-bookworm | config file = None 2026-06-21 20:37:12.159647 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-21 20:37:12.160088 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-21 20:37:12.160437 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-21 20:37:12.160840 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-21 20:37:12.161168 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-21 20:37:12.161434 | debian-bookworm | jinja version = 3.1.6 2026-06-21 20:37:12.161707 | debian-bookworm | libyaml = True 2026-06-21 20:37:12.161934 | debian-bookworm | No config file found; using defaults 2026-06-21 20:37:12.162326 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-21 20:37:12.162542 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-21 20:37:12.162853 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-21 20:37:12.166972 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-21 20:37:12.167413 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-21 20:37:12.168262 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-21 20:37:12.168779 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-21 20:37:12.170204 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-21 20:37:12.170554 | debian-bookworm | Found installed collection cisco.mso:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-21 20:37:12.172235 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-21 20:37:12.172655 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-21 20:37:12.172891 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-21 20:37:12.173105 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-21 20:37:12.173905 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-21 20:37:12.174270 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-21 20:37:12.174507 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-21 20:37:12.175319 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-21 20:37:12.175731 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-21 20:37:12.175950 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-21 20:37:12.176278 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-21 20:37:12.176575 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-21 20:37:12.177404 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-21 20:37:12.177843 | debian-bookworm | Found installed collection microsoft.ad:1.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-21 20:37:12.178090 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-21 20:37:12.178323 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-21 20:37:12.178559 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-21 20:37:12.179017 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-21 20:37:12.179258 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-21 20:37:12.179585 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-21 20:37:12.179822 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-21 20:37:12.180049 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-21 20:37:12.180403 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-21 20:37:12.180845 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-21 20:37:12.181149 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-21 20:37:12.181359 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-21 20:37:12.182618 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-21 20:37:12.182898 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-21 20:37:12.185052 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-21 20:37:12.185337 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-21 20:37:12.185859 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-21 20:37:12.186192 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-21 20:37:12.186637 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-21 20:37:12.187006 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-21 20:37:12.187360 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-21 20:37:12.187663 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-21 20:37:12.187885 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-21 20:37:12.188134 | debian-bookworm | Found installed collection cisco.intersight:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-21 20:37:12.188312 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-21 20:37:12.188615 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-21 20:37:12.188928 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-21 20:37:12.189311 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-21 20:37:12.195083 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-21 20:37:12.195292 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-21 20:37:12.195620 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-21 20:37:12.195929 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-21 20:37:12.196227 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-21 20:37:12.196550 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-21 20:37:12.197175 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-21 20:37:12.197399 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-21 20:37:12.197780 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-21 20:37:12.198095 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-21 20:37:12.198315 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-21 20:37:12.198535 | debian-bookworm | Found installed collection microsoft.iis:1.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-21 20:37:12.199414 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-21 20:37:12.200479 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-21 20:37:12.201200 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-21 20:37:12.201566 | debian-bookworm | Found installed collection community.dns:3.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-21 20:37:12.201903 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-21 20:37:12.202327 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-21 20:37:12.204741 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-21 20:37:12.205304 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-21 20:37:12.205646 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-21 20:37:12.206061 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-21 20:37:12.206341 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-21 20:37:12.206626 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-21 20:37:12.207029 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-21 20:37:12.207317 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-21 20:37:12.207606 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-21 20:37:12.207940 | debian-bookworm | Found installed collection community.routeros:3.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-21 20:37:12.208417 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-21 20:37:12.208797 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-21 20:37:12.209184 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-21 20:37:12.209476 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-21 20:37:12.209880 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-21 20:37:12.210160 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-21 20:37:12.210538 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-21 20:37:12.210884 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-21 20:37:12.211300 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-21 20:37:12.211565 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-21 20:37:12.211946 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-21 20:37:12.212171 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-21 20:37:12.212953 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-21 20:37:12.213229 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-21 20:37:12.213882 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-21 20:37:12.214161 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-21 20:37:12.214570 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-21 20:37:12.214880 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-21 20:37:12.215562 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-21 20:37:12.215857 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-21 20:37:12.216130 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-21 20:37:12.216409 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-21 20:37:12.216730 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-21 20:37:12.217021 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-21 20:37:12.217295 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-21 20:37:12.217566 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-21 20:37:12.219660 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-21 20:37:12.219991 | debian-bookworm | Found installed collection azure.azcollection:3.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-21 20:37:12.220742 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-21 20:37:12.220977 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-21 20:37:12.221440 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-21 20:37:12.221781 | debian-bookworm | Found installed collection community.docker:4.8.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-21 20:37:12.222104 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-21 20:37:12.222366 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-21 20:37:12.222711 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-21 20:37:12.223072 | debian-bookworm | Found installed collection purestorage.flasharray:1.40.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-21 20:37:12.223423 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-21 20:37:12.223788 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-21 20:37:12.224945 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-21 20:37:12.225204 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-21 20:37:12.226237 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-21 20:37:12.226474 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-21 20:37:12.227390 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-21 20:37:12.227630 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-21 20:37:12.227877 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-21 20:37:12.228217 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-21 20:37:12.265065 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-21 20:37:12.265499 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-21 20:37:12.266469 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-21 20:37:12.266959 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-21 20:37:12.267475 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-21 20:37:12.267988 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-21 20:37:12.268362 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-21 20:37:12.269043 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-21 20:37:12.269453 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-21 20:37:12.269860 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-21 20:37:12.270137 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-21 20:37:12.270523 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-21 20:37:12.270935 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-21 20:37:12.271310 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-21 20:37:12.271953 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-21 20:37:12.272375 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-21 20:37:12.272794 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-21 20:37:12.273036 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-21 20:37:12.275572 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-21 20:37:12.276253 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-21 20:37:12.276809 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-21 20:37:12.277390 | debian-bookworm | Found installed collection inspur.ispim:2.2.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-21 20:37:12.277874 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-21 20:37:12.278313 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-21 20:37:12.278713 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-21 20:37:12.279194 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-21 20:37:12.286343 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-21 20:37:12.286764 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-21 20:37:12.288284 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-21 20:37:12.288744 | debian-bookworm | Found installed collection cisco.aci:2.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-21 20:37:12.289176 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-21 20:37:12.289471 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-21 20:37:12.289902 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-21 20:37:12.290194 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-21 20:37:12.290569 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-21 20:37:12.290979 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-21 20:37:12.291372 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-21 20:37:12.291791 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-21 20:37:12.292180 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-21 20:37:12.292547 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-21 20:37:12.292979 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-21 20:37:12.293268 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-21 20:37:12.293638 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-21 20:37:12.293973 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-21 20:37:12.295194 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-21 20:37:12.295463 | debian-bookworm | Found installed collection cisco.meraki:2.21.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-21 20:37:12.296270 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-21 20:37:12.296580 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-21 20:37:12.296925 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-21 20:37:12.297289 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-21 20:37:12.298470 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-21 20:37:12.298778 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-21 20:37:12.299896 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-21 20:37:12.300372 | debian-bookworm | Found installed collection community.postgresql:3.14.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-21 20:37:12.301279 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-21 20:37:12.301833 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-21 20:37:12.302394 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-21 20:37:12.302857 | debian-bookworm | Found installed collection check_point.mgmt:6.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-21 20:37:12.303270 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-21 20:37:12.303534 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-21 20:37:12.303830 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-21 20:37:12.304187 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-21 20:37:12.306182 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-21 20:37:12.306485 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-21 20:37:12.306900 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-21 20:37:12.307190 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-21 20:37:12.307466 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-21 20:37:12.307771 | debian-bookworm | Found installed collection cyberark.conjur:1.3.9 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-21 20:37:12.308047 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-21 20:37:12.308323 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-21 20:37:12.309313 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-21 20:37:12.309587 | debian-bookworm | Found installed collection google.cloud:1.10.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-21 20:37:12.314187 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-21 20:37:12.315981 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-21 20:37:12.317303 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-21 20:37:12.317557 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-21 20:37:12.318343 | debian-bookworm | Starting galaxy collection install process 2026-06-21 20:37:12.318533 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-21 20:37:12.406762 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-21 20:37:12.406944 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-21 20:37:12.423973 | debian-bookworm | INFO [delegated > create] Executing 2026-06-21 20:37:12.427063 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-21 20:37:12.436026 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-21 20:37:12.436126 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-21 20:37:12.436142 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-21 20:37:12.444417 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-21 20:37:12.536193 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-21 20:37:12.536237 | ubuntu-noble | config file = None 2026-06-21 20:37:12.536243 | ubuntu-noble | configured module search path = 2026-06-21 20:37:12.536247 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-21 20:37:12.536252 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-21 20:37:12.536255 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-21 20:37:12.536259 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-21 20:37:12.536263 | ubuntu-noble | jinja version = 3.1.6 2026-06-21 20:37:12.536266 | ubuntu-noble | libyaml = True 2026-06-21 20:37:12.536665 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:12.536671 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:12.536675 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:12.536679 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:12.536682 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:12.536686 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-21 20:37:12.536695 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:12.536699 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:12.536704 | ubuntu-noble | 2026-06-21 20:37:12.536935 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:12.536940 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-21 20:37:12.536944 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:12.536956 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:12.536960 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:12.536964 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:12.536967 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:12.536971 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:12.536974 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:12.536978 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:12.536981 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:12.536985 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:12.536988 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:12.536992 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:12.536995 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:12.536998 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:12.537002 | ubuntu-noble | 2026-06-21 20:37:12.537337 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:12.813069 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-21 20:37:12.805752 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-21 20:37:12.805835 | debian-bookworm | config file = None 2026-06-21 20:37:12.805841 | debian-bookworm | configured module search path = 2026-06-21 20:37:12.805846 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-21 20:37:12.805852 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-21 20:37:12.805857 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-21 20:37:12.805861 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-21 20:37:12.805865 | debian-bookworm | jinja version = 3.1.6 2026-06-21 20:37:12.805869 | debian-bookworm | libyaml = True 2026-06-21 20:37:12.805883 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:12.805887 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:12.805902 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:12.805906 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:12.805910 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:12.805914 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-21 20:37:12.805917 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:12.805921 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:12.805925 | debian-bookworm | 2026-06-21 20:37:12.806156 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:12.806162 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-21 20:37:12.806166 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:12.806186 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:12.806190 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:12.806194 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:12.806202 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:12.806206 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:12.806210 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:12.806215 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:12.806218 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:12.806223 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:12.806227 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:12.806230 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:12.806234 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:12.806238 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:12.806242 | debian-bookworm | 2026-06-21 20:37:12.806493 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:13.021854 | ubuntu-noble | 2026-06-21 20:37:13.022229 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-21 20:37:13.022512 | ubuntu-noble | 2026-06-21 20:37:13.022871 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-21 20:37:13.091418 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-21 20:37:13.338373 | debian-bookworm | 2026-06-21 20:37:13.338714 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-21 20:37:13.338991 | debian-bookworm | 2026-06-21 20:37:13.339286 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-21 20:37:14.196679 | ubuntu-noble | ok: [molecule-auditd] 2026-06-21 20:37:14.196728 | ubuntu-noble | 2026-06-21 20:37:14.196825 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-21 20:37:14.225698 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-21 20:37:14.225778 | ubuntu-noble | 2026-06-21 20:37:14.225889 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-21 20:37:14.280005 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-21 20:37:14.280276 | ubuntu-noble | 2026-06-21 20:37:14.280554 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-21 20:37:14.311399 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-21 20:37:14.311522 | ubuntu-noble | 2026-06-21 20:37:14.311700 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-21 20:37:14.603401 | debian-bookworm | ok: [molecule-auditd] 2026-06-21 20:37:14.603529 | debian-bookworm | 2026-06-21 20:37:14.603541 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-21 20:37:14.645189 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-21 20:37:14.645265 | debian-bookworm | 2026-06-21 20:37:14.645408 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-21 20:37:14.688408 | debian-bookworm | included: auditd for molecule-auditd 2026-06-21 20:37:14.688596 | debian-bookworm | 2026-06-21 20:37:14.688612 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-21 20:37:14.727860 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-21 20:37:14.727989 | debian-bookworm | 2026-06-21 20:37:14.728001 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-21 20:37:18.303907 | ubuntu-noble | The following additional packages will be installed: 2026-06-21 20:37:18.304121 | ubuntu-noble | libauparse0t64 2026-06-21 20:37:18.304296 | ubuntu-noble | Suggested packages: 2026-06-21 20:37:18.304468 | ubuntu-noble | audispd-plugins 2026-06-21 20:37:18.304660 | ubuntu-noble | The following NEW packages will be installed: 2026-06-21 20:37:18.304835 | ubuntu-noble | auditd libauparse0t64 2026-06-21 20:37:18.305008 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-21 20:37:18.307941 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1782074138, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2491 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36085 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2491 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36085 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-21 20:37:18.308077 | ubuntu-noble | 2026-06-21 20:37:18.308264 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-21 20:37:19.112443 | debian-bookworm | The following additional packages will be installed: 2026-06-21 20:37:19.112625 | debian-bookworm | libauparse0 2026-06-21 20:37:19.112637 | debian-bookworm | Suggested packages: 2026-06-21 20:37:19.112644 | debian-bookworm | audispd-plugins 2026-06-21 20:37:19.112653 | debian-bookworm | The following NEW packages will be installed: 2026-06-21 20:37:19.112670 | debian-bookworm | auditd libauparse0 2026-06-21 20:37:19.112704 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-21 20:37:19.113418 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1782074137, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3478 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28691 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3478 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28691 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-21 20:37:19.113454 | debian-bookworm | 2026-06-21 20:37:19.113540 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-21 20:37:21.505449 | ubuntu-noble | The following NEW packages will be installed: 2026-06-21 20:37:21.505761 | ubuntu-noble | audispd-plugins 2026-06-21 20:37:21.506103 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-21 20:37:21.506474 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1782074138, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (529 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36181 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (529 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36181 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-21 20:37:21.506726 | ubuntu-noble | 2026-06-21 20:37:21.506996 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-21 20:37:22.049010 | debian-bookworm | The following NEW packages will be installed: 2026-06-21 20:37:22.049125 | debian-bookworm | audispd-plugins 2026-06-21 20:37:22.049147 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-21 20:37:22.049169 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1782074137, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (912 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28782 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (912 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28782 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-21 20:37:22.049180 | debian-bookworm | 2026-06-21 20:37:22.049190 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-21 20:37:22.793754 | ubuntu-noble | --- before 2026-06-21 20:37:22.793858 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-3263z7ed67fm/tmpljx5j74o/auditd.conf.j2 2026-06-21 20:37:22.793958 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-21 20:37:22.794089 | ubuntu-noble | +# 2026-06-21 20:37:22.794197 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-21 20:37:22.794291 | ubuntu-noble | +# 2026-06-21 20:37:22.794386 | ubuntu-noble | + 2026-06-21 20:37:22.794486 | ubuntu-noble | +local_events = yes 2026-06-21 20:37:22.794581 | ubuntu-noble | +write_logs = yes 2026-06-21 20:37:22.794718 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-21 20:37:22.794818 | ubuntu-noble | +log_group = adm 2026-06-21 20:37:22.794913 | ubuntu-noble | +log_format = RAW 2026-06-21 20:37:22.795013 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-21 20:37:22.795155 | ubuntu-noble | +freq = 50 2026-06-21 20:37:22.795255 | ubuntu-noble | +max_log_file = 8 2026-06-21 20:37:22.795353 | ubuntu-noble | +num_logs = 5 2026-06-21 20:37:22.795452 | ubuntu-noble | +priority_boost = 4 2026-06-21 20:37:22.795549 | ubuntu-noble | +disp_qos = lossy 2026-06-21 20:37:22.795663 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-21 20:37:22.795760 | ubuntu-noble | +name_format = NONE 2026-06-21 20:37:22.795854 | ubuntu-noble | +##name = mydomain 2026-06-21 20:37:22.795952 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-21 20:37:22.796078 | ubuntu-noble | +space_left = 12361 2026-06-21 20:37:22.796164 | ubuntu-noble | +space_left_action = email 2026-06-21 20:37:22.796261 | ubuntu-noble | +verify_email = yes 2026-06-21 20:37:22.796354 | ubuntu-noble | +action_mail_acct = root 2026-06-21 20:37:22.796453 | ubuntu-noble | +admin_space_left = 50 2026-06-21 20:37:22.796552 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-21 20:37:22.798495 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-21 20:37:22.798522 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-21 20:37:22.798526 | ubuntu-noble | +use_libwrap = yes 2026-06-21 20:37:22.798530 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-21 20:37:22.798533 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-21 20:37:22.798537 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-21 20:37:22.798541 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-21 20:37:22.798544 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-21 20:37:22.798548 | ubuntu-noble | +enable_krb5 = no 2026-06-21 20:37:22.798551 | ubuntu-noble | +krb5_principal = auditd 2026-06-21 20:37:22.798555 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-21 20:37:22.798559 | ubuntu-noble | +distribute_network = no 2026-06-21 20:37:22.798563 | ubuntu-noble | 2026-06-21 20:37:22.798578 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782074241.5240731-3665-159783218884163/.source.conf", "state": "file", "uid": 0} 2026-06-21 20:37:22.798584 | ubuntu-noble | 2026-06-21 20:37:22.798588 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-21 20:37:23.266362 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-21 20:37:23.266619 | ubuntu-noble | 2026-06-21 20:37:23.266919 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-21 20:37:23.266055 | debian-bookworm | --- before 2026-06-21 20:37:23.266163 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-25912_ldcbkx/tmpg32166sx/auditd.conf.j2 2026-06-21 20:37:23.266177 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-21 20:37:23.266194 | debian-bookworm | +# 2026-06-21 20:37:23.266204 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-21 20:37:23.266296 | debian-bookworm | +# 2026-06-21 20:37:23.266386 | debian-bookworm | + 2026-06-21 20:37:23.266484 | debian-bookworm | +local_events = yes 2026-06-21 20:37:23.266585 | debian-bookworm | +write_logs = yes 2026-06-21 20:37:23.266694 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-21 20:37:23.266793 | debian-bookworm | +log_group = adm 2026-06-21 20:37:23.266888 | debian-bookworm | +log_format = RAW 2026-06-21 20:37:23.266984 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-21 20:37:23.267082 | debian-bookworm | +freq = 50 2026-06-21 20:37:23.267177 | debian-bookworm | +max_log_file = 8 2026-06-21 20:37:23.267273 | debian-bookworm | +num_logs = 5 2026-06-21 20:37:23.267368 | debian-bookworm | +priority_boost = 4 2026-06-21 20:37:23.267463 | debian-bookworm | +disp_qos = lossy 2026-06-21 20:37:23.267558 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-21 20:37:23.267653 | debian-bookworm | +name_format = NONE 2026-06-21 20:37:23.268025 | debian-bookworm | +##name = mydomain 2026-06-21 20:37:23.268140 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-21 20:37:23.268238 | debian-bookworm | +space_left = 12361 2026-06-21 20:37:23.268336 | debian-bookworm | +space_left_action = email 2026-06-21 20:37:23.268432 | debian-bookworm | +verify_email = yes 2026-06-21 20:37:23.268559 | debian-bookworm | +action_mail_acct = root 2026-06-21 20:37:23.268656 | debian-bookworm | +admin_space_left = 50 2026-06-21 20:37:23.268767 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-21 20:37:23.268863 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-21 20:37:23.268958 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-21 20:37:23.269052 | debian-bookworm | +use_libwrap = yes 2026-06-21 20:37:23.269151 | debian-bookworm | +##tcp_listen_port = 60 2026-06-21 20:37:23.269245 | debian-bookworm | +tcp_listen_queue = 5 2026-06-21 20:37:23.269341 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-21 20:37:23.269438 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-21 20:37:23.269533 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-21 20:37:23.269626 | debian-bookworm | +enable_krb5 = no 2026-06-21 20:37:23.269735 | debian-bookworm | +krb5_principal = auditd 2026-06-21 20:37:23.269831 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-21 20:37:23.269927 | debian-bookworm | +distribute_network = no 2026-06-21 20:37:23.270014 | debian-bookworm | 2026-06-21 20:37:23.270136 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782074242.0690632-2987-185031172326450/.source.conf", "state": "file", "uid": 0} 2026-06-21 20:37:23.270214 | debian-bookworm | 2026-06-21 20:37:23.270324 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-21 20:37:23.695433 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-21 20:37:23.695533 | debian-bookworm | 2026-06-21 20:37:23.695554 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-21 20:37:24.193409 | ubuntu-noble | --- before 2026-06-21 20:37:24.193626 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-3263z7ed67fm/tmpf2rxv8_9/20-neo23x0.rules.j2 2026-06-21 20:37:24.193813 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-21 20:37:24.193978 | ubuntu-noble | +# ___ ___ __ __ 2026-06-21 20:37:24.194169 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-21 20:37:24.194349 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-21 20:37:24.194496 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-21 20:37:24.194670 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-21 20:37:24.195059 | ubuntu-noble | +# 2026-06-21 20:37:24.195075 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-21 20:37:24.197009 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-21 20:37:24.197184 | ubuntu-noble | +# 2026-06-21 20:37:24.197329 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-21 20:37:24.197468 | ubuntu-noble | +# 2026-06-21 20:37:24.197653 | ubuntu-noble | +# Created : 2017/12/05 2026-06-21 20:37:24.197798 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-21 20:37:24.197938 | ubuntu-noble | +# 2026-06-21 20:37:24.198106 | ubuntu-noble | +# Based on rules published here: 2026-06-21 20:37:24.198233 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-21 20:37:24.198629 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-21 20:37:24.199050 | ubuntu-noble | +# CentOS 7 hardening 2026-06-21 20:37:24.199058 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-21 20:37:24.199233 | ubuntu-noble | +# Linux audit repo 2026-06-21 20:37:24.199433 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-21 20:37:24.199660 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-21 20:37:24.199860 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-21 20:37:24.199981 | ubuntu-noble | +# 2026-06-21 20:37:24.200132 | ubuntu-noble | +# Further rules 2026-06-21 20:37:24.200310 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-21 20:37:24.200507 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-21 20:37:24.200694 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-21 20:37:24.200883 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-21 20:37:24.202066 | ubuntu-noble | + 2026-06-21 20:37:24.202089 | ubuntu-noble | +# Remove any existing rules 2026-06-21 20:37:24.202096 | ubuntu-noble | +-D 2026-06-21 20:37:24.202099 | ubuntu-noble | + 2026-06-21 20:37:24.202103 | ubuntu-noble | +# Buffer Size 2026-06-21 20:37:24.202106 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-21 20:37:24.202111 | ubuntu-noble | +-b 8192 2026-06-21 20:37:24.202114 | ubuntu-noble | + 2026-06-21 20:37:24.202118 | ubuntu-noble | +# Failure Mode 2026-06-21 20:37:24.202125 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-21 20:37:24.202222 | ubuntu-noble | +-f 1 2026-06-21 20:37:24.202325 | ubuntu-noble | + 2026-06-21 20:37:24.202434 | ubuntu-noble | +# Ignore errors 2026-06-21 20:37:24.202547 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-21 20:37:24.202669 | ubuntu-noble | +-i 2026-06-21 20:37:24.202769 | ubuntu-noble | + 2026-06-21 20:37:24.202879 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-21 20:37:24.202982 | ubuntu-noble | + 2026-06-21 20:37:24.203109 | ubuntu-noble | +## Audit the audit logs 2026-06-21 20:37:24.203221 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-21 20:37:24.203330 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-21 20:37:24.203437 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-21 20:37:24.203540 | ubuntu-noble | + 2026-06-21 20:37:24.203661 | ubuntu-noble | +## Auditd configuration 2026-06-21 20:37:24.203775 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-21 20:37:24.203883 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-21 20:37:24.203994 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-21 20:37:24.204125 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-21 20:37:24.204231 | ubuntu-noble | + 2026-06-21 20:37:24.204341 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-21 20:37:24.204452 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-21 20:37:24.204560 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-21 20:37:24.204700 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-21 20:37:24.204809 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-21 20:37:24.204911 | ubuntu-noble | + 2026-06-21 20:37:24.205050 | ubuntu-noble | +## Access to all audit trails 2026-06-21 20:37:24.205133 | ubuntu-noble | + 2026-06-21 20:37:24.205238 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-21 20:37:24.205341 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-21 20:37:24.205462 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-21 20:37:24.205567 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-21 20:37:24.205678 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-21 20:37:24.205773 | ubuntu-noble | + 2026-06-21 20:37:24.205871 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-21 20:37:24.205964 | ubuntu-noble | + 2026-06-21 20:37:24.206087 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-21 20:37:24.206181 | ubuntu-noble | + 2026-06-21 20:37:24.206285 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-21 20:37:24.206387 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-21 20:37:24.206477 | ubuntu-noble | + 2026-06-21 20:37:24.206575 | ubuntu-noble | +## Ignore current working directory records 2026-06-21 20:37:24.206701 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-21 20:37:24.206794 | ubuntu-noble | + 2026-06-21 20:37:24.206901 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-21 20:37:24.206999 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-21 20:37:24.208130 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-21 20:37:24.208148 | ubuntu-noble | + 2026-06-21 20:37:24.208152 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-21 20:37:24.208155 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-21 20:37:24.208159 | ubuntu-noble | + 2026-06-21 20:37:24.208162 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-21 20:37:24.208166 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-21 20:37:24.208169 | ubuntu-noble | + 2026-06-21 20:37:24.208173 | ubuntu-noble | +## Open VM Tools 2026-06-21 20:37:24.208177 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-21 20:37:24.208180 | ubuntu-noble | + 2026-06-21 20:37:24.208186 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-21 20:37:24.208291 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-21 20:37:24.208394 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-21 20:37:24.208489 | ubuntu-noble | + 2026-06-21 20:37:24.208587 | ubuntu-noble | +## FileBeat 2026-06-21 20:37:24.208702 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-21 20:37:24.208796 | ubuntu-noble | + 2026-06-21 20:37:24.208898 | ubuntu-noble | +## More information on how to filter events 2026-06-21 20:37:24.209004 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-21 20:37:24.209109 | ubuntu-noble | + 2026-06-21 20:37:24.209217 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-21 20:37:24.209303 | ubuntu-noble | + 2026-06-21 20:37:24.209402 | ubuntu-noble | +## Kernel parameters 2026-06-21 20:37:24.209500 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-21 20:37:24.209619 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-21 20:37:24.209722 | ubuntu-noble | + 2026-06-21 20:37:24.209820 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-21 20:37:24.209925 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-21 20:37:24.210043 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-21 20:37:24.210145 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-21 20:37:24.210250 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-21 20:37:24.210343 | ubuntu-noble | + 2026-06-21 20:37:24.210446 | ubuntu-noble | +## Modprobe configuration 2026-06-21 20:37:24.210548 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-21 20:37:24.210656 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-21 20:37:24.210751 | ubuntu-noble | + 2026-06-21 20:37:24.210851 | ubuntu-noble | +## KExec usage (all actions) 2026-06-21 20:37:24.210956 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-21 20:37:24.211062 | ubuntu-noble | + 2026-06-21 20:37:24.211162 | ubuntu-noble | +## Special files 2026-06-21 20:37:24.211264 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-21 20:37:24.211361 | ubuntu-noble | + 2026-06-21 20:37:24.211458 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-21 20:37:24.211561 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-21 20:37:24.211683 | ubuntu-noble | + 2026-06-21 20:37:24.211787 | ubuntu-noble | +### NFS mount 2026-06-21 20:37:24.211897 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.212010 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.212120 | ubuntu-noble | + 2026-06-21 20:37:24.212223 | ubuntu-noble | +## Change swap (only attributable) 2026-06-21 20:37:24.212326 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-21 20:37:24.212417 | ubuntu-noble | + 2026-06-21 20:37:24.212514 | ubuntu-noble | +## Time 2026-06-21 20:37:24.212627 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-21 20:37:24.212725 | ubuntu-noble | +### Local time zone 2026-06-21 20:37:24.212823 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-21 20:37:24.212917 | ubuntu-noble | + 2026-06-21 20:37:24.213013 | ubuntu-noble | +## Stunnel 2026-06-21 20:37:24.213125 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-21 20:37:24.213232 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-21 20:37:24.213315 | ubuntu-noble | + 2026-06-21 20:37:24.213417 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-21 20:37:24.213549 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-21 20:37:24.213634 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-21 20:37:24.213716 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-21 20:37:24.213814 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-21 20:37:24.213912 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-21 20:37:24.215045 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-21 20:37:24.215068 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-21 20:37:24.215072 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-21 20:37:24.215077 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-21 20:37:24.215080 | ubuntu-noble | + 2026-06-21 20:37:24.215084 | ubuntu-noble | +## User, group, password databases 2026-06-21 20:37:24.215088 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-21 20:37:24.215091 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-21 20:37:24.215095 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-21 20:37:24.215098 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-21 20:37:24.215102 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-21 20:37:24.215109 | ubuntu-noble | + 2026-06-21 20:37:24.215173 | ubuntu-noble | +## Sudoers file changes 2026-06-21 20:37:24.215275 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-21 20:37:24.215375 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-21 20:37:24.215468 | ubuntu-noble | + 2026-06-21 20:37:24.215563 | ubuntu-noble | +## Passwd 2026-06-21 20:37:24.215677 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-21 20:37:24.215771 | ubuntu-noble | + 2026-06-21 20:37:24.215871 | ubuntu-noble | +## Tools to change group identifiers 2026-06-21 20:37:24.215973 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-21 20:37:24.216092 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-21 20:37:24.216223 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-21 20:37:24.216295 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-21 20:37:24.216393 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-21 20:37:24.216497 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-21 20:37:24.216611 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-21 20:37:24.216699 | ubuntu-noble | + 2026-06-21 20:37:24.216799 | ubuntu-noble | +## Login configuration and information 2026-06-21 20:37:24.216901 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-21 20:37:24.217001 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-21 20:37:24.217115 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-21 20:37:24.217214 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-21 20:37:24.217313 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-21 20:37:24.217408 | ubuntu-noble | + 2026-06-21 20:37:24.217508 | ubuntu-noble | +## Network Environment 2026-06-21 20:37:24.217615 | ubuntu-noble | +### Changes to hostname 2026-06-21 20:37:24.217721 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-21 20:37:24.217817 | ubuntu-noble | + 2026-06-21 20:37:24.217916 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-21 20:37:24.218036 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-21 20:37:24.218135 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-21 20:37:24.218229 | ubuntu-noble | + 2026-06-21 20:37:24.218332 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-21 20:37:24.218434 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-21 20:37:24.218526 | ubuntu-noble | + 2026-06-21 20:37:24.218651 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-21 20:37:24.218755 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-21 20:37:24.219470 | ubuntu-noble | + 2026-06-21 20:37:24.219489 | ubuntu-noble | +### Changes to other files 2026-06-21 20:37:24.219493 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-21 20:37:24.219497 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-21 20:37:24.219501 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-21 20:37:24.219505 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-21 20:37:24.219508 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-21 20:37:24.219515 | ubuntu-noble | + 2026-06-21 20:37:24.219636 | ubuntu-noble | +### Changes to issue 2026-06-21 20:37:24.219729 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-21 20:37:24.219828 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-21 20:37:24.219920 | ubuntu-noble | + 2026-06-21 20:37:24.220038 | ubuntu-noble | +## System startup scripts 2026-06-21 20:37:24.220135 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-21 20:37:24.220230 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-21 20:37:24.220324 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-21 20:37:24.220416 | ubuntu-noble | + 2026-06-21 20:37:24.220547 | ubuntu-noble | +## Library search paths 2026-06-21 20:37:24.220637 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-21 20:37:24.220739 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-21 20:37:24.220834 | ubuntu-noble | + 2026-06-21 20:37:24.220938 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-21 20:37:24.221050 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-21 20:37:24.221145 | ubuntu-noble | + 2026-06-21 20:37:24.221241 | ubuntu-noble | +## Pam configuration 2026-06-21 20:37:24.221344 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-21 20:37:24.221445 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-21 20:37:24.221545 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-21 20:37:24.221670 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-21 20:37:24.221756 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-21 20:37:24.221854 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-21 20:37:24.221954 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-21 20:37:24.222057 | ubuntu-noble | + 2026-06-21 20:37:24.222156 | ubuntu-noble | +## Mail configuration 2026-06-21 20:37:24.222253 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-21 20:37:24.222352 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-21 20:37:24.222449 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-21 20:37:24.222541 | ubuntu-noble | + 2026-06-21 20:37:24.222647 | ubuntu-noble | +## SSH configuration 2026-06-21 20:37:24.222754 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-21 20:37:24.222845 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-21 20:37:24.222935 | ubuntu-noble | + 2026-06-21 20:37:24.223047 | ubuntu-noble | +## root ssh key tampering 2026-06-21 20:37:24.223145 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-21 20:37:24.223236 | ubuntu-noble | + 2026-06-21 20:37:24.223331 | ubuntu-noble | +# Systemd 2026-06-21 20:37:24.223428 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-21 20:37:24.223523 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-21 20:37:24.223647 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-21 20:37:24.223743 | ubuntu-noble | + 2026-06-21 20:37:24.223847 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-21 20:37:24.223947 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.224062 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.224176 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-21 20:37:24.224269 | ubuntu-noble | + 2026-06-21 20:37:24.224370 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.224470 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.224570 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.224674 | ubuntu-noble | + 2026-06-21 20:37:24.224778 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-21 20:37:24.224914 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-21 20:37:24.224969 | ubuntu-noble | + 2026-06-21 20:37:24.225080 | ubuntu-noble | +## Critical elements access failures 2026-06-21 20:37:24.225182 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225288 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225392 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225492 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225612 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225706 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225807 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.225911 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.226004 | ubuntu-noble | + 2026-06-21 20:37:24.226123 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-21 20:37:24.226222 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-21 20:37:24.226320 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-21 20:37:24.226413 | ubuntu-noble | + 2026-06-21 20:37:24.226510 | ubuntu-noble | +## Power state 2026-06-21 20:37:24.226631 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-21 20:37:24.226730 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-21 20:37:24.226829 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-21 20:37:24.226926 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-21 20:37:24.227061 | ubuntu-noble | + 2026-06-21 20:37:24.227129 | ubuntu-noble | +## Session initiation information 2026-06-21 20:37:24.228050 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-21 20:37:24.228070 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-21 20:37:24.228074 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-21 20:37:24.228077 | ubuntu-noble | + 2026-06-21 20:37:24.228082 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-21 20:37:24.228086 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228089 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228093 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228097 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228116 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228205 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228309 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228410 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228510 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228626 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228730 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228831 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.228939 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.229041 | ubuntu-noble | + 2026-06-21 20:37:24.229137 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-21 20:37:24.229230 | ubuntu-noble | + 2026-06-21 20:37:24.229327 | ubuntu-noble | +## Reconnaissance 2026-06-21 20:37:24.229427 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-21 20:37:24.229524 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-21 20:37:24.229642 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-21 20:37:24.229743 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-21 20:37:24.229841 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-21 20:37:24.229939 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-21 20:37:24.230049 | ubuntu-noble | + 2026-06-21 20:37:24.230144 | ubuntu-noble | +## Suspicious activity 2026-06-21 20:37:24.230242 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-21 20:37:24.230344 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-21 20:37:24.230445 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-21 20:37:24.230545 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-21 20:37:24.230693 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-21 20:37:24.230753 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-21 20:37:24.230855 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-21 20:37:24.230955 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-21 20:37:24.231072 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-21 20:37:24.231821 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-21 20:37:24.231837 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-21 20:37:24.231841 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-21 20:37:24.231845 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-21 20:37:24.231848 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-21 20:37:24.231852 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-21 20:37:24.231875 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-21 20:37:24.231977 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-21 20:37:24.232100 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-21 20:37:24.232197 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-21 20:37:24.232295 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-21 20:37:24.232401 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-21 20:37:24.232507 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-21 20:37:24.232829 | ubuntu-noble | + 2026-06-21 20:37:24.232927 | ubuntu-noble | +## sssd 2026-06-21 20:37:24.233059 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.233180 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.233573 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.233585 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.233613 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.233617 | ubuntu-noble | + 2026-06-21 20:37:24.233680 | ubuntu-noble | +## T1002 Data Compressed 2026-06-21 20:37:24.233816 | ubuntu-noble | + 2026-06-21 20:37:24.233876 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-21 20:37:24.233984 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-21 20:37:24.234127 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-21 20:37:24.234203 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.234295 | ubuntu-noble | + 2026-06-21 20:37:24.234398 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-21 20:37:24.234502 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-21 20:37:24.234651 | ubuntu-noble | + 2026-06-21 20:37:24.234729 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-21 20:37:24.234833 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-21 20:37:24.234927 | ubuntu-noble | + 2026-06-21 20:37:24.235040 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-21 20:37:24.235149 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-21 20:37:24.235243 | ubuntu-noble | + 2026-06-21 20:37:24.235345 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-21 20:37:24.235442 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-21 20:37:24.235535 | ubuntu-noble | + 2026-06-21 20:37:24.235643 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.235743 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.235837 | ubuntu-noble | + 2026-06-21 20:37:24.235938 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.236085 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.236927 | ubuntu-noble | + 2026-06-21 20:37:24.236944 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-21 20:37:24.236948 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-21 20:37:24.236962 | ubuntu-noble | + 2026-06-21 20:37:24.236966 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-21 20:37:24.236970 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-21 20:37:24.236973 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-21 20:37:24.236977 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-21 20:37:24.236981 | ubuntu-noble | + 2026-06-21 20:37:24.237061 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-21 20:37:24.237139 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-21 20:37:24.237233 | ubuntu-noble | + 2026-06-21 20:37:24.237338 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-21 20:37:24.237431 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-21 20:37:24.237532 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-21 20:37:24.237652 | ubuntu-noble | + 2026-06-21 20:37:24.237752 | ubuntu-noble | +## Sbin suspicious activity 2026-06-21 20:37:24.237852 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-21 20:37:24.237951 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-21 20:37:24.238075 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-21 20:37:24.238175 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-21 20:37:24.238274 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-21 20:37:24.238374 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-21 20:37:24.238474 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-21 20:37:24.238576 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-21 20:37:24.238684 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-21 20:37:24.239275 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-21 20:37:24.239293 | ubuntu-noble | + 2026-06-21 20:37:24.239298 | ubuntu-noble | +### kde4 2026-06-21 20:37:24.239302 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.239306 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.239309 | ubuntu-noble | + 2026-06-21 20:37:24.239370 | ubuntu-noble | +## dbus-send invocation 2026-06-21 20:37:24.239470 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-21 20:37:24.239569 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-21 20:37:24.239710 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-21 20:37:24.239787 | ubuntu-noble | + 2026-06-21 20:37:24.239886 | ubuntu-noble | +## pkexec invocation 2026-06-21 20:37:24.239990 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-21 20:37:24.240817 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-21 20:37:24.240838 | ubuntu-noble | + 2026-06-21 20:37:24.240842 | ubuntu-noble | +## Suspicious shells 2026-06-21 20:37:24.240846 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-21 20:37:24.240850 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-21 20:37:24.240853 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-21 20:37:24.240857 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-21 20:37:24.240860 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-21 20:37:24.240867 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-21 20:37:24.240961 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-21 20:37:24.241075 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-21 20:37:24.241170 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-21 20:37:24.241260 | ubuntu-noble | + 2026-06-21 20:37:24.241360 | ubuntu-noble | +# Web Server Actvity 2026-06-21 20:37:24.241468 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-21 20:37:24.241570 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-21 20:37:24.241686 | ubuntu-noble | + 2026-06-21 20:37:24.241790 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-21 20:37:24.241888 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-21 20:37:24.241989 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-21 20:37:24.242730 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-21 20:37:24.242750 | ubuntu-noble | + 2026-06-21 20:37:24.243063 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-21 20:37:24.243117 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-21 20:37:24.243212 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-21 20:37:24.243309 | ubuntu-noble | + 2026-06-21 20:37:24.244248 | ubuntu-noble | +## Shell/profile configurations 2026-06-21 20:37:24.244268 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-21 20:37:24.244273 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-21 20:37:24.244276 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-21 20:37:24.244280 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-21 20:37:24.244283 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-21 20:37:24.244287 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-21 20:37:24.244290 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-21 20:37:24.244294 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-21 20:37:24.244301 | ubuntu-noble | + 2026-06-21 20:37:24.244378 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-21 20:37:24.244486 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-21 20:37:24.244577 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-21 20:37:24.244714 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-21 20:37:24.245215 | ubuntu-noble | + 2026-06-21 20:37:24.245444 | ubuntu-noble | +## Injection 2026-06-21 20:37:24.246587 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-21 20:37:24.246623 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-21 20:37:24.246627 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-21 20:37:24.246631 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-21 20:37:24.246635 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-21 20:37:24.246639 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-21 20:37:24.246642 | ubuntu-noble | + 2026-06-21 20:37:24.246646 | ubuntu-noble | +## Anonymous File Creation 2026-06-21 20:37:24.246650 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-21 20:37:24.246653 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-21 20:37:24.246657 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-21 20:37:24.246965 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-21 20:37:24.247145 | ubuntu-noble | + 2026-06-21 20:37:24.247165 | ubuntu-noble | +## Privilege Abuse 2026-06-21 20:37:24.247825 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-21 20:37:24.247850 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-21 20:37:24.247861 | ubuntu-noble | + 2026-06-21 20:37:24.247871 | ubuntu-noble | +# Socket Creations 2026-06-21 20:37:24.247882 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-21 20:37:24.247892 | ubuntu-noble | + 2026-06-21 20:37:24.248211 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-21 20:37:24.248241 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-21 20:37:24.248318 | ubuntu-noble | + 2026-06-21 20:37:24.248405 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-21 20:37:24.248506 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-21 20:37:24.248640 | ubuntu-noble | + 2026-06-21 20:37:24.248745 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-21 20:37:24.248839 | ubuntu-noble | + 2026-06-21 20:37:24.248939 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-21 20:37:24.249077 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-21 20:37:24.249171 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-21 20:37:24.249318 | ubuntu-noble | + 2026-06-21 20:37:24.249370 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-21 20:37:24.249466 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-21 20:37:24.249561 | ubuntu-noble | + 2026-06-21 20:37:24.249675 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-21 20:37:24.249774 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-21 20:37:24.249878 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-21 20:37:24.249974 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-21 20:37:24.251152 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-21 20:37:24.251197 | ubuntu-noble | + 2026-06-21 20:37:24.251208 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-21 20:37:24.251219 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-21 20:37:24.251228 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-21 20:37:24.251239 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-21 20:37:24.251249 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-21 20:37:24.251259 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-21 20:37:24.251268 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-21 20:37:24.251278 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-21 20:37:24.251295 | ubuntu-noble | + 2026-06-21 20:37:24.251306 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-21 20:37:24.251417 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251492 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251621 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251706 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251808 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251918 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-21 20:37:24.251998 | ubuntu-noble | + 2026-06-21 20:37:24.252142 | ubuntu-noble | +# npm 2026-06-21 20:37:24.252227 | ubuntu-noble | +## T1072 third party software 2026-06-21 20:37:24.252317 | ubuntu-noble | +## https://www.npmjs.com 2026-06-21 20:37:24.252422 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-21 20:37:24.252533 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-21 20:37:24.252645 | ubuntu-noble | + 2026-06-21 20:37:24.252755 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-21 20:37:24.252853 | ubuntu-noble | +## T1072 third party software 2026-06-21 20:37:24.252953 | ubuntu-noble | +## https://www.cpan.org 2026-06-21 20:37:24.253107 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-21 20:37:24.253167 | ubuntu-noble | + 2026-06-21 20:37:24.253268 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-21 20:37:24.253368 | ubuntu-noble | +## T1072 third party software 2026-06-21 20:37:24.253469 | ubuntu-noble | +## https://rubygems.org 2026-06-21 20:37:24.253708 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-21 20:37:24.253726 | ubuntu-noble | + 2026-06-21 20:37:24.253783 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-21 20:37:24.253907 | ubuntu-noble | +## T1072 third party software 2026-06-21 20:37:24.254079 | ubuntu-noble | +## https://luarocks.org 2026-06-21 20:37:24.254104 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-21 20:37:24.254186 | ubuntu-noble | + 2026-06-21 20:37:24.254829 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-21 20:37:24.254848 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-21 20:37:24.254856 | ubuntu-noble | +## T1072 third party software 2026-06-21 20:37:24.254864 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-21 20:37:24.254871 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-21 20:37:24.254879 | ubuntu-noble | + 2026-06-21 20:37:24.254890 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-21 20:37:24.255059 | ubuntu-noble | + 2026-06-21 20:37:24.255083 | ubuntu-noble | +## GDS specific secrets 2026-06-21 20:37:24.255172 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-21 20:37:24.255242 | ubuntu-noble | + 2026-06-21 20:37:24.255340 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-21 20:37:24.255448 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-21 20:37:24.255549 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-21 20:37:24.255665 | ubuntu-noble | + 2026-06-21 20:37:24.255923 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-21 20:37:24.255937 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-21 20:37:24.255948 | ubuntu-noble | + 2026-06-21 20:37:24.256071 | ubuntu-noble | +## Salt 2026-06-21 20:37:24.256160 | ubuntu-noble | +## https://saltproject.io/ 2026-06-21 20:37:24.257004 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-21 20:37:24.257069 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-21 20:37:24.257079 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-21 20:37:24.257087 | ubuntu-noble | + 2026-06-21 20:37:24.257095 | ubuntu-noble | +## Otter 2026-06-21 20:37:24.257103 | ubuntu-noble | +## https://inedo.com/otter 2026-06-21 20:37:24.257122 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-21 20:37:24.257130 | ubuntu-noble | + 2026-06-21 20:37:24.257137 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-21 20:37:24.257150 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-21 20:37:24.257211 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-21 20:37:24.257307 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-21 20:37:24.257406 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.257509 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-21 20:37:24.257670 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-21 20:37:24.257720 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-21 20:37:24.257808 | ubuntu-noble | + 2026-06-21 20:37:24.257907 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-21 20:37:24.258006 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-21 20:37:24.258125 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.258228 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-21 20:37:24.258321 | ubuntu-noble | + 2026-06-21 20:37:24.258427 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-21 20:37:24.258528 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-21 20:37:24.258632 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.258731 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-21 20:37:24.258823 | ubuntu-noble | + 2026-06-21 20:37:24.258929 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-21 20:37:24.259095 | ubuntu-noble | + 2026-06-21 20:37:24.259118 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-21 20:37:24.259403 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.259416 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-21 20:37:24.259423 | ubuntu-noble | + 2026-06-21 20:37:24.259500 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-21 20:37:24.259624 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-21 20:37:24.259723 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.259824 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-21 20:37:24.261071 | ubuntu-noble | + 2026-06-21 20:37:24.261097 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-21 20:37:24.261104 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-21 20:37:24.261110 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.261116 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-21 20:37:24.261122 | ubuntu-noble | + 2026-06-21 20:37:24.261127 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-21 20:37:24.261133 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-21 20:37:24.261139 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.261144 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-21 20:37:24.261150 | ubuntu-noble | + 2026-06-21 20:37:24.261155 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-21 20:37:24.261161 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-21 20:37:24.261171 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.261256 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-21 20:37:24.261352 | ubuntu-noble | + 2026-06-21 20:37:24.261456 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-21 20:37:24.261555 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-21 20:37:24.261677 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.261779 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-21 20:37:24.261872 | ubuntu-noble | + 2026-06-21 20:37:24.261973 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-21 20:37:24.262090 | ubuntu-noble | +### https://beyondgrep.com 2026-06-21 20:37:24.262189 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-21 20:37:24.262311 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-21 20:37:24.262392 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-21 20:37:24.262491 | ubuntu-noble | +### macOS 2026-06-21 20:37:24.262642 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-21 20:37:24.262698 | ubuntu-noble | + 2026-06-21 20:37:24.262794 | ubuntu-noble | +## Docker 2026-06-21 20:37:24.262890 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-21 20:37:24.262986 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-21 20:37:24.263110 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-21 20:37:24.263208 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-21 20:37:24.263304 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-21 20:37:24.263404 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-21 20:37:24.263505 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-21 20:37:24.263623 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-21 20:37:24.263709 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-21 20:37:24.263816 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-21 20:37:24.263946 | ubuntu-noble | + 2026-06-21 20:37:24.264107 | ubuntu-noble | +## Virtualization stuff 2026-06-21 20:37:24.264213 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-21 20:37:24.264314 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-21 20:37:24.264413 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-21 20:37:24.264513 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-21 20:37:24.264640 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-21 20:37:24.264744 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-21 20:37:24.264843 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-21 20:37:24.264940 | ubuntu-noble | + 2026-06-21 20:37:24.265053 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-21 20:37:24.265151 | ubuntu-noble | + 2026-06-21 20:37:24.265287 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-21 20:37:24.265390 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-21 20:37:24.265508 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-21 20:37:24.265621 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-21 20:37:24.265724 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-21 20:37:24.265830 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-21 20:37:24.265932 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-21 20:37:24.266057 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-21 20:37:24.266169 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-21 20:37:24.266688 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-21 20:37:24.266700 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-21 20:37:24.266705 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-21 20:37:24.266711 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-21 20:37:24.266716 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-21 20:37:24.266789 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-21 20:37:24.266889 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-21 20:37:24.266991 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-21 20:37:24.267100 | ubuntu-noble | + 2026-06-21 20:37:24.267202 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-21 20:37:24.267295 | ubuntu-noble | + 2026-06-21 20:37:24.267395 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-21 20:37:24.267494 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-21 20:37:24.267697 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-21 20:37:24.267807 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-21 20:37:24.267908 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-21 20:37:24.268007 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-21 20:37:24.268123 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-21 20:37:24.268223 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-21 20:37:24.268319 | ubuntu-noble | + 2026-06-21 20:37:24.268414 | ubuntu-noble | +### qemu on macOS 2026-06-21 20:37:24.268507 | ubuntu-noble | + 2026-06-21 20:37:24.268622 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-21 20:37:24.268723 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-21 20:37:24.268857 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-21 20:37:24.268933 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-21 20:37:24.269046 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-21 20:37:24.269139 | ubuntu-noble | + 2026-06-21 20:37:24.269235 | ubuntu-noble | +## Kubelet 2026-06-21 20:37:24.269333 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-21 20:37:24.269423 | ubuntu-noble | + 2026-06-21 20:37:24.269521 | ubuntu-noble | +# ipc system call 2026-06-21 20:37:24.269634 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-21 20:37:24.269728 | ubuntu-noble | + 2026-06-21 20:37:24.269827 | ubuntu-noble | +## msgctl 2026-06-21 20:37:24.269957 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-21 20:37:24.270046 | ubuntu-noble | +## msgget 2026-06-21 20:37:24.270151 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-21 20:37:24.270252 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.270357 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-21 20:37:24.270463 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-21 20:37:24.270552 | ubuntu-noble | + 2026-06-21 20:37:24.270671 | ubuntu-noble | +## semctl 2026-06-21 20:37:24.270781 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-21 20:37:24.270883 | ubuntu-noble | +## semget 2026-06-21 20:37:24.270982 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-21 20:37:24.271093 | ubuntu-noble | +## semop 2026-06-21 20:37:24.271195 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-21 20:37:24.271293 | ubuntu-noble | +## semtimedop 2026-06-21 20:37:24.271394 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-21 20:37:24.271495 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.271621 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-21 20:37:24.271714 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-21 20:37:24.272144 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-21 20:37:24.272158 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-21 20:37:24.272163 | ubuntu-noble | + 2026-06-21 20:37:24.272168 | ubuntu-noble | +## shmctl 2026-06-21 20:37:24.272217 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-21 20:37:24.272308 | ubuntu-noble | +## shmget 2026-06-21 20:37:24.272414 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-21 20:37:24.272512 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.272633 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-21 20:37:24.272739 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-21 20:37:24.272843 | ubuntu-noble | + 2026-06-21 20:37:24.272942 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-21 20:37:24.273049 | ubuntu-noble | + 2026-06-21 20:37:24.273153 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-21 20:37:24.273251 | ubuntu-noble | + 2026-06-21 20:37:24.273349 | ubuntu-noble | +## Common Shells 2026-06-21 20:37:24.273449 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-21 20:37:24.273547 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-21 20:37:24.273661 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-21 20:37:24.274045 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-21 20:37:24.274058 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-21 20:37:24.274062 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-21 20:37:24.274069 | ubuntu-noble | + 2026-06-21 20:37:24.274153 | ubuntu-noble | +## Root command executions 2026-06-21 20:37:24.274262 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-21 20:37:24.274355 | ubuntu-noble | + 2026-06-21 20:37:24.276051 | ubuntu-noble | +## File Deletion Events by User 2026-06-21 20:37:24.276075 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-21 20:37:24.276079 | ubuntu-noble | + 2026-06-21 20:37:24.276083 | ubuntu-noble | +## File Access 2026-06-21 20:37:24.276088 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-21 20:37:24.276092 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-21 20:37:24.276099 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-21 20:37:24.276102 | ubuntu-noble | + 2026-06-21 20:37:24.276106 | ubuntu-noble | +### Unsuccessful Creation 2026-06-21 20:37:24.276110 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-21 20:37:24.276114 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-21 20:37:24.276118 | ubuntu-noble | + 2026-06-21 20:37:24.276122 | ubuntu-noble | +### Unsuccessful Modification 2026-06-21 20:37:24.276127 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-21 20:37:24.276143 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-21 20:37:24.276148 | ubuntu-noble | + 2026-06-21 20:37:24.276151 | ubuntu-noble | +## 32bit API Exploitation 2026-06-21 20:37:24.276159 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-21 20:37:24.276211 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-21 20:37:24.276314 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-21 20:37:24.276415 | ubuntu-noble | +### bit API. 2026-06-21 20:37:24.276518 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-21 20:37:24.276641 | ubuntu-noble | + 2026-06-21 20:37:24.276727 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-21 20:37:24.276821 | ubuntu-noble | + 2026-06-21 20:37:24.276920 | ubuntu-noble | +##-e 2 2026-06-21 20:37:24.277013 | ubuntu-noble | 2026-06-21 20:37:24.277285 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782074243.2995362-3743-226618237135332/.source.rules", "state": "file", "uid": 0} 2026-06-21 20:37:24.277364 | ubuntu-noble | 2026-06-21 20:37:24.277469 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-21 20:37:24.533072 | debian-bookworm | --- before 2026-06-21 20:37:24.533150 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-25912_ldcbkx/tmp_24j513c/20-neo23x0.rules.j2 2026-06-21 20:37:24.536554 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-21 20:37:24.536636 | debian-bookworm | +# ___ ___ __ __ 2026-06-21 20:37:24.536646 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-21 20:37:24.536653 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-21 20:37:24.536659 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-21 20:37:24.536665 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-21 20:37:24.536672 | debian-bookworm | +# 2026-06-21 20:37:24.536704 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-21 20:37:24.536711 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-21 20:37:24.536717 | debian-bookworm | +# 2026-06-21 20:37:24.536724 | debian-bookworm | +# Compiled by Florian Roth 2026-06-21 20:37:24.536730 | debian-bookworm | +# 2026-06-21 20:37:24.536736 | debian-bookworm | +# Created : 2017/12/05 2026-06-21 20:37:24.536761 | debian-bookworm | +# Modified : 2023/01/25 2026-06-21 20:37:24.536767 | debian-bookworm | +# 2026-06-21 20:37:24.536773 | debian-bookworm | +# Based on rules published here: 2026-06-21 20:37:24.536780 | debian-bookworm | +# Gov.uk auditd rules 2026-06-21 20:37:24.536786 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-21 20:37:24.536793 | debian-bookworm | +# CentOS 7 hardening 2026-06-21 20:37:24.536799 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-21 20:37:24.536807 | debian-bookworm | +# Linux audit repo 2026-06-21 20:37:24.536813 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-21 20:37:24.536821 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-21 20:37:24.536827 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-21 20:37:24.536834 | debian-bookworm | +# 2026-06-21 20:37:24.536840 | debian-bookworm | +# Further rules 2026-06-21 20:37:24.536847 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-21 20:37:24.536853 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-21 20:37:24.536861 | debian-bookworm | +# For NISPOM compliance see: 2026-06-21 20:37:24.536873 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-21 20:37:24.536879 | debian-bookworm | + 2026-06-21 20:37:24.536886 | debian-bookworm | +# Remove any existing rules 2026-06-21 20:37:24.536929 | debian-bookworm | +-D 2026-06-21 20:37:24.537023 | debian-bookworm | + 2026-06-21 20:37:24.537117 | debian-bookworm | +# Buffer Size 2026-06-21 20:37:24.537213 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-21 20:37:24.537307 | debian-bookworm | +-b 8192 2026-06-21 20:37:24.537401 | debian-bookworm | + 2026-06-21 20:37:24.537493 | debian-bookworm | +# Failure Mode 2026-06-21 20:37:24.537617 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-21 20:37:24.537751 | debian-bookworm | +-f 1 2026-06-21 20:37:24.537839 | debian-bookworm | + 2026-06-21 20:37:24.537935 | debian-bookworm | +# Ignore errors 2026-06-21 20:37:24.538046 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-21 20:37:24.538141 | debian-bookworm | +-i 2026-06-21 20:37:24.538234 | debian-bookworm | + 2026-06-21 20:37:24.538327 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-21 20:37:24.538423 | debian-bookworm | + 2026-06-21 20:37:24.538519 | debian-bookworm | +## Audit the audit logs 2026-06-21 20:37:24.538622 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-21 20:37:24.538786 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-21 20:37:24.538891 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-21 20:37:24.538999 | debian-bookworm | + 2026-06-21 20:37:24.539095 | debian-bookworm | +## Auditd configuration 2026-06-21 20:37:24.539192 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-21 20:37:24.539298 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-21 20:37:24.539401 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-21 20:37:24.539523 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-21 20:37:24.539623 | debian-bookworm | + 2026-06-21 20:37:24.544824 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-21 20:37:24.545153 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-21 20:37:24.545351 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-21 20:37:24.545565 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-21 20:37:24.545832 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-21 20:37:24.546017 | debian-bookworm | + 2026-06-21 20:37:24.546187 | debian-bookworm | +## Access to all audit trails 2026-06-21 20:37:24.546346 | debian-bookworm | + 2026-06-21 20:37:24.546518 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-21 20:37:24.546751 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-21 20:37:24.546929 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-21 20:37:24.547073 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-21 20:37:24.547215 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-21 20:37:24.547352 | debian-bookworm | + 2026-06-21 20:37:24.547495 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-21 20:37:24.547655 | debian-bookworm | + 2026-06-21 20:37:24.547941 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-21 20:37:24.548119 | debian-bookworm | + 2026-06-21 20:37:24.548326 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-21 20:37:24.548610 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-21 20:37:24.548849 | debian-bookworm | + 2026-06-21 20:37:24.549067 | debian-bookworm | +## Ignore current working directory records 2026-06-21 20:37:24.549285 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-21 20:37:24.549458 | debian-bookworm | + 2026-06-21 20:37:24.549610 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-21 20:37:24.549770 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-21 20:37:24.549915 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-21 20:37:24.550077 | debian-bookworm | + 2026-06-21 20:37:24.550261 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-21 20:37:24.550414 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-21 20:37:24.550553 | debian-bookworm | + 2026-06-21 20:37:24.550746 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-21 20:37:24.550903 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-21 20:37:24.551039 | debian-bookworm | + 2026-06-21 20:37:24.551173 | debian-bookworm | +## Open VM Tools 2026-06-21 20:37:24.551308 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-21 20:37:24.551438 | debian-bookworm | + 2026-06-21 20:37:24.551576 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-21 20:37:24.551728 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-21 20:37:24.551865 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-21 20:37:24.551993 | debian-bookworm | + 2026-06-21 20:37:24.552126 | debian-bookworm | +## FileBeat 2026-06-21 20:37:24.552260 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-21 20:37:24.552432 | debian-bookworm | + 2026-06-21 20:37:24.552667 | debian-bookworm | +## More information on how to filter events 2026-06-21 20:37:24.552836 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-21 20:37:24.552970 | debian-bookworm | + 2026-06-21 20:37:24.553104 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-21 20:37:24.553235 | debian-bookworm | + 2026-06-21 20:37:24.553367 | debian-bookworm | +## Kernel parameters 2026-06-21 20:37:24.553503 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-21 20:37:24.553635 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-21 20:37:24.553808 | debian-bookworm | + 2026-06-21 20:37:24.553947 | debian-bookworm | +## Kernel module loading and unloading 2026-06-21 20:37:24.554082 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-21 20:37:24.554206 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-21 20:37:24.554329 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-21 20:37:24.554484 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-21 20:37:24.554615 | debian-bookworm | + 2026-06-21 20:37:24.554755 | debian-bookworm | +## Modprobe configuration 2026-06-21 20:37:24.554880 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-21 20:37:24.555001 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-21 20:37:24.555122 | debian-bookworm | + 2026-06-21 20:37:24.555246 | debian-bookworm | +## KExec usage (all actions) 2026-06-21 20:37:24.555369 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-21 20:37:24.555488 | debian-bookworm | + 2026-06-21 20:37:24.555610 | debian-bookworm | +## Special files 2026-06-21 20:37:24.555796 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-21 20:37:24.555925 | debian-bookworm | + 2026-06-21 20:37:24.556069 | debian-bookworm | +## Mount operations (only attributable) 2026-06-21 20:37:24.556227 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-21 20:37:24.556355 | debian-bookworm | + 2026-06-21 20:37:24.556518 | debian-bookworm | +### NFS mount 2026-06-21 20:37:24.556669 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.556820 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.556931 | debian-bookworm | + 2026-06-21 20:37:24.557043 | debian-bookworm | +## Change swap (only attributable) 2026-06-21 20:37:24.557159 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-21 20:37:24.557278 | debian-bookworm | + 2026-06-21 20:37:24.557408 | debian-bookworm | +## Time 2026-06-21 20:37:24.557529 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-21 20:37:24.557657 | debian-bookworm | +### Local time zone 2026-06-21 20:37:24.557792 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-21 20:37:24.557903 | debian-bookworm | + 2026-06-21 20:37:24.558015 | debian-bookworm | +## Stunnel 2026-06-21 20:37:24.558133 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-21 20:37:24.558244 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-21 20:37:24.558352 | debian-bookworm | + 2026-06-21 20:37:24.558463 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-21 20:37:24.558574 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-21 20:37:24.558720 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-21 20:37:24.558839 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-21 20:37:24.558955 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-21 20:37:24.559066 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-21 20:37:24.559175 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-21 20:37:24.559283 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-21 20:37:24.559393 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-21 20:37:24.559504 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-21 20:37:24.559635 | debian-bookworm | + 2026-06-21 20:37:24.559770 | debian-bookworm | +## User, group, password databases 2026-06-21 20:37:24.559882 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-21 20:37:24.559994 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-21 20:37:24.560106 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-21 20:37:24.560216 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-21 20:37:24.560326 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-21 20:37:24.560434 | debian-bookworm | + 2026-06-21 20:37:24.560566 | debian-bookworm | +## Sudoers file changes 2026-06-21 20:37:24.560821 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-21 20:37:24.560972 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-21 20:37:24.561084 | debian-bookworm | + 2026-06-21 20:37:24.561193 | debian-bookworm | +## Passwd 2026-06-21 20:37:24.561306 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-21 20:37:24.561412 | debian-bookworm | + 2026-06-21 20:37:24.561532 | debian-bookworm | +## Tools to change group identifiers 2026-06-21 20:37:24.561648 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-21 20:37:24.561800 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-21 20:37:24.561915 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-21 20:37:24.562028 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-21 20:37:24.562138 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-21 20:37:24.562249 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-21 20:37:24.562361 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-21 20:37:24.562469 | debian-bookworm | + 2026-06-21 20:37:24.562580 | debian-bookworm | +## Login configuration and information 2026-06-21 20:37:24.562703 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-21 20:37:24.562816 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-21 20:37:24.562927 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-21 20:37:24.563038 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-21 20:37:24.563148 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-21 20:37:24.563258 | debian-bookworm | + 2026-06-21 20:37:24.563369 | debian-bookworm | +## Network Environment 2026-06-21 20:37:24.563479 | debian-bookworm | +### Changes to hostname 2026-06-21 20:37:24.563593 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-21 20:37:24.563712 | debian-bookworm | + 2026-06-21 20:37:24.563826 | debian-bookworm | +### Detect Remote Shell Use 2026-06-21 20:37:24.563942 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-21 20:37:24.564056 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-21 20:37:24.564164 | debian-bookworm | + 2026-06-21 20:37:24.564280 | debian-bookworm | +### Successful IPv4 Connections 2026-06-21 20:37:24.564392 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-21 20:37:24.564534 | debian-bookworm | + 2026-06-21 20:37:24.564646 | debian-bookworm | +### Successful IPv6 Connections 2026-06-21 20:37:24.564778 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-21 20:37:24.564888 | debian-bookworm | + 2026-06-21 20:37:24.565012 | debian-bookworm | +### Changes to other files 2026-06-21 20:37:24.565126 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-21 20:37:24.565239 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-21 20:37:24.565353 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-21 20:37:24.565463 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-21 20:37:24.565576 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-21 20:37:24.565698 | debian-bookworm | + 2026-06-21 20:37:24.565809 | debian-bookworm | +### Changes to issue 2026-06-21 20:37:24.565920 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-21 20:37:24.566034 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-21 20:37:24.566144 | debian-bookworm | + 2026-06-21 20:37:24.566255 | debian-bookworm | +## System startup scripts 2026-06-21 20:37:24.566368 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-21 20:37:24.566478 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-21 20:37:24.566589 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-21 20:37:24.566711 | debian-bookworm | + 2026-06-21 20:37:24.566824 | debian-bookworm | +## Library search paths 2026-06-21 20:37:24.566936 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-21 20:37:24.567049 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-21 20:37:24.567156 | debian-bookworm | + 2026-06-21 20:37:24.567270 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-21 20:37:24.567382 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-21 20:37:24.567490 | debian-bookworm | + 2026-06-21 20:37:24.567600 | debian-bookworm | +## Pam configuration 2026-06-21 20:37:24.567723 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-21 20:37:24.567835 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-21 20:37:24.567944 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-21 20:37:24.568056 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-21 20:37:24.568166 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-21 20:37:24.568277 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-21 20:37:24.568400 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-21 20:37:24.568528 | debian-bookworm | + 2026-06-21 20:37:24.568640 | debian-bookworm | +## Mail configuration 2026-06-21 20:37:24.568788 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-21 20:37:24.568901 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-21 20:37:24.569012 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-21 20:37:24.569122 | debian-bookworm | + 2026-06-21 20:37:24.569232 | debian-bookworm | +## SSH configuration 2026-06-21 20:37:24.569343 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-21 20:37:24.569455 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-21 20:37:24.569563 | debian-bookworm | + 2026-06-21 20:37:24.569673 | debian-bookworm | +## root ssh key tampering 2026-06-21 20:37:24.569822 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-21 20:37:24.569933 | debian-bookworm | + 2026-06-21 20:37:24.570044 | debian-bookworm | +# Systemd 2026-06-21 20:37:24.570157 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-21 20:37:24.570270 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-21 20:37:24.570382 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-21 20:37:24.570493 | debian-bookworm | + 2026-06-21 20:37:24.570608 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-21 20:37:24.570735 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.570849 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.570962 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-21 20:37:24.571069 | debian-bookworm | + 2026-06-21 20:37:24.571182 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.571293 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.571404 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-21 20:37:24.571512 | debian-bookworm | + 2026-06-21 20:37:24.571625 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-21 20:37:24.571750 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-21 20:37:24.571858 | debian-bookworm | + 2026-06-21 20:37:24.571970 | debian-bookworm | +## Critical elements access failures 2026-06-21 20:37:24.572116 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.572248 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.572362 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.572549 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.572733 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.572879 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.573015 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.573153 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-21 20:37:24.573283 | debian-bookworm | + 2026-06-21 20:37:24.573417 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-21 20:37:24.573552 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-21 20:37:24.573697 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-21 20:37:24.573832 | debian-bookworm | + 2026-06-21 20:37:24.573965 | debian-bookworm | +## Power state 2026-06-21 20:37:24.574099 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-21 20:37:24.574231 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-21 20:37:24.574364 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-21 20:37:24.574495 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-21 20:37:24.574622 | debian-bookworm | + 2026-06-21 20:37:24.574799 | debian-bookworm | +## Session initiation information 2026-06-21 20:37:24.575025 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-21 20:37:24.575184 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-21 20:37:24.575319 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-21 20:37:24.575450 | debian-bookworm | + 2026-06-21 20:37:24.575587 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-21 20:37:24.575781 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.575962 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.576111 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.576248 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.576394 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.576646 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.576889 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577117 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577287 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577430 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577569 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577725 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.577916 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-21 20:37:24.578067 | debian-bookworm | + 2026-06-21 20:37:24.578230 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-21 20:37:24.578493 | debian-bookworm | + 2026-06-21 20:37:24.578638 | debian-bookworm | +## Reconnaissance 2026-06-21 20:37:24.578837 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-21 20:37:24.578989 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-21 20:37:24.579127 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-21 20:37:24.579260 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-21 20:37:24.579395 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-21 20:37:24.579528 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-21 20:37:24.579660 | debian-bookworm | + 2026-06-21 20:37:24.579899 | debian-bookworm | +## Suspicious activity 2026-06-21 20:37:24.580049 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-21 20:37:24.580185 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-21 20:37:24.580319 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-21 20:37:24.580471 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-21 20:37:24.580667 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-21 20:37:24.580848 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-21 20:37:24.580998 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-21 20:37:24.581136 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-21 20:37:24.581268 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-21 20:37:24.581407 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-21 20:37:24.581540 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-21 20:37:24.581674 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-21 20:37:24.581824 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-21 20:37:24.581956 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-21 20:37:24.582087 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-21 20:37:24.582220 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-21 20:37:24.582355 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-21 20:37:24.582490 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-21 20:37:24.582623 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-21 20:37:24.582796 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-21 20:37:24.582933 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-21 20:37:24.583065 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-21 20:37:24.583194 | debian-bookworm | + 2026-06-21 20:37:24.583326 | debian-bookworm | +## sssd 2026-06-21 20:37:24.583478 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.583617 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.583768 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.583906 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.584103 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.584303 | debian-bookworm | + 2026-06-21 20:37:24.584489 | debian-bookworm | +## T1002 Data Compressed 2026-06-21 20:37:24.584630 | debian-bookworm | + 2026-06-21 20:37:24.584812 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-21 20:37:24.584951 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-21 20:37:24.585086 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-21 20:37:24.585221 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.585350 | debian-bookworm | + 2026-06-21 20:37:24.585532 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-21 20:37:24.585767 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-21 20:37:24.585960 | debian-bookworm | + 2026-06-21 20:37:24.586103 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-21 20:37:24.586249 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-21 20:37:24.586394 | debian-bookworm | + 2026-06-21 20:37:24.586531 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-21 20:37:24.586665 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-21 20:37:24.586813 | debian-bookworm | + 2026-06-21 20:37:24.586949 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-21 20:37:24.587084 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-21 20:37:24.587217 | debian-bookworm | + 2026-06-21 20:37:24.587350 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.587484 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.587617 | debian-bookworm | + 2026-06-21 20:37:24.587788 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.587929 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-21 20:37:24.588058 | debian-bookworm | + 2026-06-21 20:37:24.588192 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-21 20:37:24.588327 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-21 20:37:24.588474 | debian-bookworm | + 2026-06-21 20:37:24.588623 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-21 20:37:24.588773 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-21 20:37:24.588908 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-21 20:37:24.589045 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-21 20:37:24.589174 | debian-bookworm | + 2026-06-21 20:37:24.589310 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-21 20:37:24.589442 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-21 20:37:24.589583 | debian-bookworm | + 2026-06-21 20:37:24.589751 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-21 20:37:24.589895 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-21 20:37:24.590031 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-21 20:37:24.590162 | debian-bookworm | + 2026-06-21 20:37:24.590295 | debian-bookworm | +## Sbin suspicious activity 2026-06-21 20:37:24.590431 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-21 20:37:24.590563 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-21 20:37:24.590711 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-21 20:37:24.590848 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-21 20:37:24.590982 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-21 20:37:24.591122 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-21 20:37:24.591258 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-21 20:37:24.591391 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-21 20:37:24.591524 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-21 20:37:24.591656 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-21 20:37:24.591806 | debian-bookworm | + 2026-06-21 20:37:24.591938 | debian-bookworm | +### kde4 2026-06-21 20:37:24.592087 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.592225 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-21 20:37:24.592353 | debian-bookworm | + 2026-06-21 20:37:24.592529 | debian-bookworm | +## dbus-send invocation 2026-06-21 20:37:24.592673 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-21 20:37:24.592824 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-21 20:37:24.592958 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-21 20:37:24.593087 | debian-bookworm | + 2026-06-21 20:37:24.593220 | debian-bookworm | +## pkexec invocation 2026-06-21 20:37:24.593355 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-21 20:37:24.593487 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-21 20:37:24.593618 | debian-bookworm | + 2026-06-21 20:37:24.593786 | debian-bookworm | +## Suspicious shells 2026-06-21 20:37:24.593924 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-21 20:37:24.594056 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-21 20:37:24.594192 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-21 20:37:24.594324 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-21 20:37:24.594455 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-21 20:37:24.594587 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-21 20:37:24.594734 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-21 20:37:24.594866 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-21 20:37:24.594997 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-21 20:37:24.595129 | debian-bookworm | + 2026-06-21 20:37:24.595262 | debian-bookworm | +# Web Server Actvity 2026-06-21 20:37:24.595401 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-21 20:37:24.595542 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-21 20:37:24.595671 | debian-bookworm | + 2026-06-21 20:37:24.595848 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-21 20:37:24.595979 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-21 20:37:24.596112 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-21 20:37:24.596241 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-21 20:37:24.596359 | debian-bookworm | + 2026-06-21 20:37:24.596501 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-21 20:37:24.596628 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-21 20:37:24.596767 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-21 20:37:24.596886 | debian-bookworm | + 2026-06-21 20:37:24.597015 | debian-bookworm | +## Shell/profile configurations 2026-06-21 20:37:24.597138 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-21 20:37:24.597260 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-21 20:37:24.597381 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-21 20:37:24.597502 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-21 20:37:24.597622 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-21 20:37:24.597835 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-21 20:37:24.597972 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-21 20:37:24.598093 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-21 20:37:24.598222 | debian-bookworm | + 2026-06-21 20:37:24.598343 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-21 20:37:24.598465 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-21 20:37:24.598586 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-21 20:37:24.598748 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-21 20:37:24.598867 | debian-bookworm | + 2026-06-21 20:37:24.598977 | debian-bookworm | +## Injection 2026-06-21 20:37:24.599092 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-21 20:37:24.599206 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-21 20:37:24.599320 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-21 20:37:24.599432 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-21 20:37:24.599542 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-21 20:37:24.599655 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-21 20:37:24.599778 | debian-bookworm | + 2026-06-21 20:37:24.599893 | debian-bookworm | +## Anonymous File Creation 2026-06-21 20:37:24.600005 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-21 20:37:24.600116 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-21 20:37:24.600240 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-21 20:37:24.600357 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-21 20:37:24.600493 | debian-bookworm | + 2026-06-21 20:37:24.600607 | debian-bookworm | +## Privilege Abuse 2026-06-21 20:37:24.600731 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-21 20:37:24.600856 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-21 20:37:24.600967 | debian-bookworm | + 2026-06-21 20:37:24.601078 | debian-bookworm | +# Socket Creations 2026-06-21 20:37:24.601189 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-21 20:37:24.601299 | debian-bookworm | + 2026-06-21 20:37:24.601413 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-21 20:37:24.601526 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-21 20:37:24.601635 | debian-bookworm | + 2026-06-21 20:37:24.601784 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-21 20:37:24.601899 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-21 20:37:24.602008 | debian-bookworm | + 2026-06-21 20:37:24.602123 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-21 20:37:24.602233 | debian-bookworm | + 2026-06-21 20:37:24.602345 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-21 20:37:24.602457 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-21 20:37:24.602569 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-21 20:37:24.602687 | debian-bookworm | + 2026-06-21 20:37:24.602803 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-21 20:37:24.602914 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-21 20:37:24.603021 | debian-bookworm | + 2026-06-21 20:37:24.603132 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-21 20:37:24.603242 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-21 20:37:24.603351 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-21 20:37:24.603460 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-21 20:37:24.603579 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-21 20:37:24.603699 | debian-bookworm | + 2026-06-21 20:37:24.603811 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-21 20:37:24.603923 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-21 20:37:24.604035 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-21 20:37:24.604148 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-21 20:37:24.604259 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-21 20:37:24.604369 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-21 20:37:24.604498 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-21 20:37:24.604621 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-21 20:37:24.604764 | debian-bookworm | + 2026-06-21 20:37:24.604876 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-21 20:37:24.604990 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605103 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605225 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605337 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605450 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605560 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-21 20:37:24.605668 | debian-bookworm | + 2026-06-21 20:37:24.605797 | debian-bookworm | +# npm 2026-06-21 20:37:24.605911 | debian-bookworm | +## T1072 third party software 2026-06-21 20:37:24.606024 | debian-bookworm | +## https://www.npmjs.com 2026-06-21 20:37:24.606136 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-21 20:37:24.606249 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-21 20:37:24.606358 | debian-bookworm | + 2026-06-21 20:37:24.606469 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-21 20:37:24.606577 | debian-bookworm | +## T1072 third party software 2026-06-21 20:37:24.606701 | debian-bookworm | +## https://www.cpan.org 2026-06-21 20:37:24.606815 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-21 20:37:24.606923 | debian-bookworm | + 2026-06-21 20:37:24.607036 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-21 20:37:24.607152 | debian-bookworm | +## T1072 third party software 2026-06-21 20:37:24.607267 | debian-bookworm | +## https://rubygems.org 2026-06-21 20:37:24.607380 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-21 20:37:24.607490 | debian-bookworm | + 2026-06-21 20:37:24.607602 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-21 20:37:24.607725 | debian-bookworm | +## T1072 third party software 2026-06-21 20:37:24.607837 | debian-bookworm | +## https://luarocks.org 2026-06-21 20:37:24.607950 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-21 20:37:24.608058 | debian-bookworm | + 2026-06-21 20:37:24.608171 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-21 20:37:24.608285 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-21 20:37:24.608398 | debian-bookworm | +## T1072 third party software 2026-06-21 20:37:24.608542 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-21 20:37:24.608662 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-21 20:37:24.608807 | debian-bookworm | + 2026-06-21 20:37:24.608923 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-21 20:37:24.609031 | debian-bookworm | + 2026-06-21 20:37:24.609142 | debian-bookworm | +## GDS specific secrets 2026-06-21 20:37:24.609254 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-21 20:37:24.609360 | debian-bookworm | + 2026-06-21 20:37:24.609470 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-21 20:37:24.609584 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-21 20:37:24.609709 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-21 20:37:24.609817 | debian-bookworm | + 2026-06-21 20:37:24.609928 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-21 20:37:24.610037 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-21 20:37:24.610143 | debian-bookworm | + 2026-06-21 20:37:24.610251 | debian-bookworm | +## Salt 2026-06-21 20:37:24.610362 | debian-bookworm | +## https://saltproject.io/ 2026-06-21 20:37:24.610479 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-21 20:37:24.610589 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-21 20:37:24.610735 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-21 20:37:24.610847 | debian-bookworm | + 2026-06-21 20:37:24.610957 | debian-bookworm | +## Otter 2026-06-21 20:37:24.611066 | debian-bookworm | +## https://inedo.com/otter 2026-06-21 20:37:24.611178 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-21 20:37:24.611285 | debian-bookworm | + 2026-06-21 20:37:24.611398 | debian-bookworm | +## T1081 Credentials In Files 2026-06-21 20:37:24.611508 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-21 20:37:24.611621 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-21 20:37:24.611746 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-21 20:37:24.611857 | debian-bookworm | +### macOS 2026-06-21 20:37:24.611969 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-21 20:37:24.612079 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-21 20:37:24.612187 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-21 20:37:24.612293 | debian-bookworm | + 2026-06-21 20:37:24.612415 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-21 20:37:24.612554 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-21 20:37:24.612667 | debian-bookworm | +### macOS 2026-06-21 20:37:24.612795 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-21 20:37:24.612913 | debian-bookworm | + 2026-06-21 20:37:24.613033 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-21 20:37:24.613146 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-21 20:37:24.613259 | debian-bookworm | +### macOS 2026-06-21 20:37:24.613370 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-21 20:37:24.613480 | debian-bookworm | + 2026-06-21 20:37:24.613593 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-21 20:37:24.613741 | debian-bookworm | + 2026-06-21 20:37:24.613859 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-21 20:37:24.613970 | debian-bookworm | +### macOS 2026-06-21 20:37:24.614080 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-21 20:37:24.614189 | debian-bookworm | + 2026-06-21 20:37:24.614302 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-21 20:37:24.614415 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-21 20:37:24.614525 | debian-bookworm | +### macOS 2026-06-21 20:37:24.614636 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-21 20:37:24.614764 | debian-bookworm | + 2026-06-21 20:37:24.614875 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-21 20:37:24.614986 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-21 20:37:24.615096 | debian-bookworm | +### macOS 2026-06-21 20:37:24.615207 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-21 20:37:24.615314 | debian-bookworm | + 2026-06-21 20:37:24.615426 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-21 20:37:24.615539 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-21 20:37:24.615650 | debian-bookworm | +### macOS 2026-06-21 20:37:24.615777 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-21 20:37:24.615888 | debian-bookworm | + 2026-06-21 20:37:24.615998 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-21 20:37:24.616107 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-21 20:37:24.616215 | debian-bookworm | +### macOS 2026-06-21 20:37:24.616325 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-21 20:37:24.616433 | debian-bookworm | + 2026-06-21 20:37:24.616576 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-21 20:37:24.616744 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-21 20:37:24.616866 | debian-bookworm | +### macOS 2026-06-21 20:37:24.616987 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-21 20:37:24.617096 | debian-bookworm | + 2026-06-21 20:37:24.617206 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-21 20:37:24.617317 | debian-bookworm | +### https://beyondgrep.com 2026-06-21 20:37:24.617426 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-21 20:37:24.617538 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-21 20:37:24.617647 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-21 20:37:24.617805 | debian-bookworm | +### macOS 2026-06-21 20:37:24.617929 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-21 20:37:24.618039 | debian-bookworm | + 2026-06-21 20:37:24.618148 | debian-bookworm | +## Docker 2026-06-21 20:37:24.618258 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-21 20:37:24.618367 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-21 20:37:24.618476 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-21 20:37:24.618587 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-21 20:37:24.618713 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-21 20:37:24.618828 | debian-bookworm | +-w /etc/docker -k docker 2026-06-21 20:37:24.618940 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-21 20:37:24.619050 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-21 20:37:24.619159 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-21 20:37:24.619268 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-21 20:37:24.619376 | debian-bookworm | + 2026-06-21 20:37:24.619485 | debian-bookworm | +## Virtualization stuff 2026-06-21 20:37:24.619596 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-21 20:37:24.619751 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-21 20:37:24.619892 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-21 20:37:24.620026 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-21 20:37:24.620145 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-21 20:37:24.620261 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-21 20:37:24.620375 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-21 20:37:24.620507 | debian-bookworm | + 2026-06-21 20:37:24.620621 | debian-bookworm | +#### VirtualBox on macOS 2026-06-21 20:37:24.620751 | debian-bookworm | + 2026-06-21 20:37:24.620954 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-21 20:37:24.621084 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-21 20:37:24.621200 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-21 20:37:24.621314 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-21 20:37:24.621425 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-21 20:37:24.621534 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-21 20:37:24.621644 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-21 20:37:24.621773 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-21 20:37:24.621885 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-21 20:37:24.621995 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-21 20:37:24.622107 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-21 20:37:24.622221 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-21 20:37:24.622335 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-21 20:37:24.622446 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-21 20:37:24.622557 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-21 20:37:24.622669 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-21 20:37:24.622796 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-21 20:37:24.622906 | debian-bookworm | + 2026-06-21 20:37:24.623017 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-21 20:37:24.623126 | debian-bookworm | + 2026-06-21 20:37:24.623238 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-21 20:37:24.623349 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-21 20:37:24.623464 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-21 20:37:24.623575 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-21 20:37:24.623727 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-21 20:37:24.623851 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-21 20:37:24.623963 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-21 20:37:24.624075 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-21 20:37:24.624183 | debian-bookworm | + 2026-06-21 20:37:24.624294 | debian-bookworm | +### qemu on macOS 2026-06-21 20:37:24.624404 | debian-bookworm | + 2026-06-21 20:37:24.624547 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-21 20:37:24.624660 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-21 20:37:24.624790 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-21 20:37:24.624901 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-21 20:37:24.625021 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-21 20:37:24.625129 | debian-bookworm | + 2026-06-21 20:37:24.625238 | debian-bookworm | +## Kubelet 2026-06-21 20:37:24.625349 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-21 20:37:24.625455 | debian-bookworm | + 2026-06-21 20:37:24.625566 | debian-bookworm | +# ipc system call 2026-06-21 20:37:24.625707 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-21 20:37:24.625828 | debian-bookworm | + 2026-06-21 20:37:24.625947 | debian-bookworm | +## msgctl 2026-06-21 20:37:24.626066 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-21 20:37:24.626176 | debian-bookworm | +## msgget 2026-06-21 20:37:24.626289 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-21 20:37:24.626401 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.626515 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-21 20:37:24.626626 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-21 20:37:24.626748 | debian-bookworm | + 2026-06-21 20:37:24.626861 | debian-bookworm | +## semctl 2026-06-21 20:37:24.626974 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-21 20:37:24.627084 | debian-bookworm | +## semget 2026-06-21 20:37:24.627195 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-21 20:37:24.627304 | debian-bookworm | +## semop 2026-06-21 20:37:24.627414 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-21 20:37:24.627523 | debian-bookworm | +## semtimedop 2026-06-21 20:37:24.627634 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-21 20:37:24.627759 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.627885 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-21 20:37:24.627997 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-21 20:37:24.628108 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-21 20:37:24.628220 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-21 20:37:24.628327 | debian-bookworm | + 2026-06-21 20:37:24.628437 | debian-bookworm | +## shmctl 2026-06-21 20:37:24.628569 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-21 20:37:24.628722 | debian-bookworm | +## shmget 2026-06-21 20:37:24.628847 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-21 20:37:24.628959 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-21 20:37:24.629070 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-21 20:37:24.629180 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-21 20:37:24.629288 | debian-bookworm | + 2026-06-21 20:37:24.629398 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-21 20:37:24.629504 | debian-bookworm | + 2026-06-21 20:37:24.629614 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-21 20:37:24.629731 | debian-bookworm | + 2026-06-21 20:37:24.629842 | debian-bookworm | +## Common Shells 2026-06-21 20:37:24.629951 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-21 20:37:24.630062 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-21 20:37:24.630177 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-21 20:37:24.630290 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-21 20:37:24.630400 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-21 20:37:24.630512 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-21 20:37:24.630623 | debian-bookworm | + 2026-06-21 20:37:24.630749 | debian-bookworm | +## Root command executions 2026-06-21 20:37:24.630866 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-21 20:37:24.630972 | debian-bookworm | + 2026-06-21 20:37:24.631084 | debian-bookworm | +## File Deletion Events by User 2026-06-21 20:37:24.631199 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-21 20:37:24.631310 | debian-bookworm | + 2026-06-21 20:37:24.631422 | debian-bookworm | +## File Access 2026-06-21 20:37:24.631534 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-21 20:37:24.631652 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-21 20:37:24.631803 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-21 20:37:24.631914 | debian-bookworm | + 2026-06-21 20:37:24.632026 | debian-bookworm | +### Unsuccessful Creation 2026-06-21 20:37:24.632139 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-21 20:37:24.632253 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-21 20:37:24.632360 | debian-bookworm | + 2026-06-21 20:37:24.632504 | debian-bookworm | +### Unsuccessful Modification 2026-06-21 20:37:24.632626 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-21 20:37:24.632764 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-21 20:37:24.632876 | debian-bookworm | + 2026-06-21 20:37:24.632988 | debian-bookworm | +## 32bit API Exploitation 2026-06-21 20:37:24.633100 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-21 20:37:24.633212 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-21 20:37:24.633323 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-21 20:37:24.633431 | debian-bookworm | +### bit API. 2026-06-21 20:37:24.633542 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-21 20:37:24.633648 | debian-bookworm | + 2026-06-21 20:37:24.633772 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-21 20:37:24.633891 | debian-bookworm | + 2026-06-21 20:37:24.634003 | debian-bookworm | +##-e 2 2026-06-21 20:37:24.634110 | debian-bookworm | 2026-06-21 20:37:24.634372 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1782074243.727188-3065-8337082424689/.source.rules", "state": "file", "uid": 0} 2026-06-21 20:37:24.634486 | debian-bookworm | 2026-06-21 20:37:24.634602 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-21 20:37:25.064298 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ActiveEnterTimestampMonotonic": "14757505279", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:17 UTC", "AssertTimestampMonotonic": "14757441842", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "54197000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ConditionTimestampMonotonic": "14757441798", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3952", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "3512", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ExecMainStartTimestampMonotonic": "14757459524", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3511 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3511 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3515 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3515 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:17 UTC", "InactiveExitTimestampMonotonic": "14757446412", "InvocationID": "11ccea05f4404a8da0bb048f40f163bf", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "3512", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3525808128", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2080768", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2026-06-21 20:37:17 UTC", "StateChangeTimestampMonotonic": "14757505279", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:25.077137 | ubuntu-noble | 2026-06-21 20:37:25.077182 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-21 20:37:25.365257 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ActiveEnterTimestampMonotonic": "22915822751", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:18 UTC", "AssertTimestampMonotonic": "22915732275", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "54739000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ConditionTimestampMonotonic": "22915732186", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3445", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2837", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ExecMainStartTimestampMonotonic": "22915793262", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2836 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2836 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2840 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2840 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:18 UTC", "InactiveExitTimestampMonotonic": "22915768535", "InvocationID": "11b4c11faf204147bdfff3b6d57954ff", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2837", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "712704", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2026-06-21 20:37:18 UTC", "StateChangeTimestampMonotonic": "22915822751", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:25.371577 | debian-bookworm | 2026-06-21 20:37:25.371617 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-21 20:37:25.540047 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008091", "end": "2026-06-21 20:37:25.493538", "msg": "", "rc": 0, "start": "2026-06-21 20:37:25.485447", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2026-06-21 20:37:25.540119 | ubuntu-noble | 2026-06-21 20:37:25.540147 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-21 20:37:25.903700 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-21 20:37:25.903762 | ubuntu-noble | --- before 2026-06-21 20:37:25.903768 | ubuntu-noble | +++ after 2026-06-21 20:37:25.903772 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-21 20:37:25.903775 | ubuntu-noble | { 2026-06-21 20:37:25.903779 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-21 20:37:25.903784 | ubuntu-noble | - "state": "file" 2026-06-21 20:37:25.903789 | ubuntu-noble | + "state": "absent" 2026-06-21 20:37:25.903793 | ubuntu-noble | } 2026-06-21 20:37:25.903797 | ubuntu-noble | 2026-06-21 20:37:25.903808 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-21 20:37:25.903813 | ubuntu-noble | 2026-06-21 20:37:25.906067 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-21 20:37:25.757803 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008411", "end": "2026-06-21 20:37:25.711735", "msg": "", "rc": 0, "start": "2026-06-21 20:37:25.703324", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-21 20:37:25.757863 | debian-bookworm | 2026-06-21 20:37:25.757874 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-21 20:37:26.084574 | debian-bookworm | --- before 2026-06-21 20:37:26.084653 | debian-bookworm | +++ after 2026-06-21 20:37:26.084668 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-21 20:37:26.084747 | debian-bookworm | { 2026-06-21 20:37:26.084761 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-21 20:37:26.084776 | debian-bookworm | - "state": "file" 2026-06-21 20:37:26.084788 | debian-bookworm | + "state": "absent" 2026-06-21 20:37:26.084800 | debian-bookworm | } 2026-06-21 20:37:26.084811 | debian-bookworm | 2026-06-21 20:37:26.085189 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-21 20:37:26.085516 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-21 20:37:26.085809 | debian-bookworm | 2026-06-21 20:37:26.086108 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-21 20:37:26.633719 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ActiveEnterTimestampMonotonic": "14757505279", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:17 UTC", "AssertTimestampMonotonic": "14757441842", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "55635000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ConditionTimestampMonotonic": "14757441798", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3952", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "3512", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:17 UTC", "ExecMainStartTimestampMonotonic": "14757459524", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3511 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3511 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3515 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:17 UTC] ; stop_time=[Sun 2026-06-21 20:37:17 UTC] ; pid=3515 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:17 UTC", "InactiveExitTimestampMonotonic": "14757446412", "InvocationID": "11ccea05f4404a8da0bb048f40f163bf", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "3512", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3534155776", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2080768", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2026-06-21 20:37:17 UTC", "StateChangeTimestampMonotonic": "14757505279", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:26.639299 | ubuntu-noble | 2026-06-21 20:37:26.639436 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-21 20:37:26.801978 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ActiveEnterTimestampMonotonic": "22915822751", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:18 UTC", "AssertTimestampMonotonic": "22915732275", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "55722000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ConditionTimestampMonotonic": "22915732186", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3445", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2837", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:18 UTC", "ExecMainStartTimestampMonotonic": "22915793262", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2836 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2836 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2840 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:18 UTC] ; stop_time=[Sun 2026-06-21 20:37:18 UTC] ; pid=2840 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:18 UTC", "InactiveExitTimestampMonotonic": "22915768535", "InvocationID": "11b4c11faf204147bdfff3b6d57954ff", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2837", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "720896", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2026-06-21 20:37:18 UTC", "StateChangeTimestampMonotonic": "22915822751", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:26.812432 | debian-bookworm | 2026-06-21 20:37:26.812534 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-21 20:37:27.061141 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.081941", "end": "2026-06-21 20:37:27.002186", "msg": "", "rc": 0, "start": "2026-06-21 20:37:26.920245", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 3904\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 617\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 3904\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 574\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 3904", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 617", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 3904", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 574", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-21 20:37:27.061203 | ubuntu-noble | 2026-06-21 20:37:27.061213 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-21 20:37:27.223465 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.074469", "end": "2026-06-21 20:37:27.163616", "msg": "", "rc": 0, "start": "2026-06-21 20:37:27.089147", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 3227\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 355\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 3227\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 338\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 3227", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 355", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 3227", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 338", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-21 20:37:27.223531 | debian-bookworm | 2026-06-21 20:37:27.223538 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-21 20:37:27.829982 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ActiveEnterTimestampMonotonic": "14766377730", "ActiveExitTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ActiveExitTimestampMonotonic": "14766206868", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:26 UTC", "AssertTimestampMonotonic": "14766247678", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "158790000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ConditionTimestampMonotonic": "14766247527", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3994", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "3904", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ExecMainStartTimestampMonotonic": "14766287371", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3903 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3903 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3907 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3907 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2026-06-21 20:37:26 UTC", "InactiveEnterTimestampMonotonic": "14766245328", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:26 UTC", "InactiveExitTimestampMonotonic": "14766255404", "InvocationID": "344ace5af96f4c849f642f47c7d281a4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "3904", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3553361920", "MemoryCurrent": "1855488", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2113536", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2026-06-21 20:37:26 UTC", "StateChangeTimestampMonotonic": "14766377730", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:27.834008 | ubuntu-noble | 2026-06-21 20:37:27.834066 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-21 20:37:27.834074 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-21 20:37:27.834079 | ubuntu-noble | 2026-06-21 20:37:27.932165 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-21 20:37:27.932562 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-21 20:37:27.953797 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ActiveEnterTimestampMonotonic": "22924290737", "ActiveExitTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ActiveExitTimestampMonotonic": "22924092551", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2026-06-21 20:37:26 UTC", "AssertTimestampMonotonic": "22924136668", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "180314000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ConditionTimestampMonotonic": "22924136595", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3484", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "3227", "ExecMainStartTimestamp": "Sun 2026-06-21 20:37:26 UTC", "ExecMainStartTimestampMonotonic": "22924182624", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3225 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3225 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3230 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2026-06-21 20:37:26 UTC] ; stop_time=[Sun 2026-06-21 20:37:26 UTC] ; pid=3230 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2026-06-21 20:37:26 UTC", "InactiveEnterTimestampMonotonic": "22924135050", "InactiveExitTimestamp": "Sun 2026-06-21 20:37:26 UTC", "InactiveExitTimestampMonotonic": "22924157362", "InvocationID": "5f853c1e98f94c33bf52017634ece2b3", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "3227", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2068480", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2026-06-21 20:37:26 UTC", "StateChangeTimestampMonotonic": "22924290737", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-21 20:37:27.955321 | debian-bookworm | 2026-06-21 20:37:27.955349 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-21 20:37:27.955357 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-21 20:37:27.955361 | debian-bookworm | 2026-06-21 20:37:28.067541 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-21 20:37:28.068399 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-21 20:37:28.491941 | ubuntu-noble | ok: Runtime: 0:00:18.533853 2026-06-21 20:37:28.525436 | debian-bookworm | ok: Runtime: 0:00:18.690092 2026-06-21 20:37:28.548162 | 2026-06-21 20:37:28.557979 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-21 20:37:29.362713 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:37:29.374865 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:29.297016 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-21 20:37:29.308852 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:29.920322 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:29.921075 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:29.946261 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:29.952000 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-21 20:37:29.952075 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:29.863463 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-21 20:37:29.864241 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-21 20:37:29.895329 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-21 20:37:29.902925 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-21 20:37:29.903131 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-21 20:37:31.526755 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-21 20:37:31.528209 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-21 20:37:31.529177 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:31.529204 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:31.529226 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:31.529244 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:31.529259 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:31.529272 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-21 20:37:31.529285 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:31.529298 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:31.529312 | ubuntu-noble | 2026-06-21 20:37:31.529336 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:31.529350 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-21 20:37:31.529363 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:31.529375 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:31.529389 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:31.529402 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:31.529415 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:31.529429 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:31.529443 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:31.529457 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:31.529470 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:31.529483 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:31.529496 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:31.529509 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:31.529522 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:31.529535 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:31.529549 | ubuntu-noble | 2026-06-21 20:37:31.529584 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:31.513393 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-21 20:37:31.514943 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-21 20:37:31.516166 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-21 20:37:31.516181 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-21 20:37:31.516189 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-21 20:37:31.516196 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-21 20:37:31.516202 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-21 20:37:31.516208 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-21 20:37:31.516214 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-21 20:37:31.516220 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-21 20:37:31.516225 | debian-bookworm | 2026-06-21 20:37:31.516316 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-21 20:37:31.516323 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-21 20:37:31.516328 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-21 20:37:31.516334 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-21 20:37:31.516340 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-21 20:37:31.516346 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-21 20:37:31.516352 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-21 20:37:31.516358 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-21 20:37:31.516363 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-21 20:37:31.516370 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-21 20:37:31.516376 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-21 20:37:31.516381 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-21 20:37:31.516386 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-21 20:37:31.516391 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-21 20:37:31.516396 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-21 20:37:31.516401 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:31.516406 | debian-bookworm | 2026-06-21 20:37:31.516511 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-21 20:37:31.811564 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-21 20:37:31.829085 | ubuntu-noble | ============================= test session starts ============================== 2026-06-21 20:37:31.829126 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-9.1.0, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-21 20:37:31.829133 | ubuntu-noble | using: pytest-9.1.0 2026-06-21 20:37:31.829138 | ubuntu-noble | registered third-party plugins: 2026-06-21 20:37:31.829144 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-21 20:37:31.829148 | ubuntu-noble | rootdir: /home/zuul 2026-06-21 20:37:31.829159 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-21 20:37:31.767018 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-21 20:37:31.783781 | debian-bookworm | ============================= test session starts ============================== 2026-06-21 20:37:31.784259 | debian-bookworm | platform linux -- Python 3.11.2, pytest-9.1.0, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-21 20:37:31.784892 | debian-bookworm | using: pytest-9.1.0 2026-06-21 20:37:31.785245 | debian-bookworm | registered third-party plugins: 2026-06-21 20:37:31.785571 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-21 20:37:31.786525 | debian-bookworm | rootdir: /home/zuul 2026-06-21 20:37:31.787114 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-21 20:37:32.957469 | ubuntu-noble | collecting ... collected 6 items 2026-06-21 20:37:32.957538 | ubuntu-noble | 2026-06-21 20:37:32.865570 | debian-bookworm | collecting ... collected 6 items 2026-06-21 20:37:32.865774 | debian-bookworm | 2026-06-21 20:37:37.490687 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-21 20:37:37.529013 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-21 20:37:37.433463 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-21 20:37:37.478528 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-21 20:37:40.278662 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-21 20:37:40.163158 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-21 20:37:45.512746 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-21 20:37:45.691373 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-21 20:37:47.078321 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-21 20:37:46.821871 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-21 20:37:46.883375 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-21 20:37:46.883677 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-21 20:37:46.883856 | debian-bookworm | 2026-06-21 20:37:46.884052 | debian-bookworm | ============================== 6 passed in 15.08s ============================== 2026-06-21 20:37:46.930128 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-21 20:37:46.930301 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-21 20:37:46.931180 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-21 20:37:47.137565 | debian-bookworm | ok: Runtime: 0:00:18.077750 2026-06-21 20:37:47.318350 | ubuntu-noble | ok: Runtime: 0:00:18.257636 2026-06-21 20:37:47.328754 | 2026-06-21 20:37:47.328934 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-21 20:37:47.130199 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-21 20:37:47.133047 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-21 20:37:47.133088 | ubuntu-noble | 2026-06-21 20:37:47.133095 | ubuntu-noble | ============================== 6 passed in 15.28s ============================== 2026-06-21 20:37:47.185914 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-21 20:37:47.186193 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-21 20:37:47.186688 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-21 20:37:47.889406 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:37:47.890624 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:37:47.911649 | 2026-06-21 20:37:47.911821 | PLAY RECAP 2026-06-21 20:37:47.911893 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-21 20:37:47.911934 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-21 20:37:47.911960 | 2026-06-21 20:37:48.107719 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-21 20:37:48.109883 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-21 20:37:48.995672 | 2026-06-21 20:37:48.995884 | PLAY [Base post-fetch] 2026-06-21 20:37:49.022275 | 2026-06-21 20:37:49.022536 | TASK [diagnose-network : Ensure log directory exists] 2026-06-21 20:37:49.803929 | debian-bookworm | ok 2026-06-21 20:37:49.810653 | ubuntu-noble | ok 2026-06-21 20:37:49.820413 | 2026-06-21 20:37:49.820619 | TASK [diagnose-network : Snapshot dual-stack network state (post)] 2026-06-21 20:38:12.398085 | debian-bookworm | ok: Runtime: 0:00:19.051865 2026-06-21 20:38:17.735119 | ubuntu-noble | ok: Runtime: 0:00:25.163478 2026-06-21 20:38:17.745558 | 2026-06-21 20:38:17.745752 | TASK [diagnose-network : Snapshot Docker/BuildKit IPv6 config (teardown)] 2026-06-21 20:38:23.871954 | debian-bookworm | ok: Runtime: 0:00:00.011155 2026-06-21 20:38:23.958915 | ubuntu-noble | ok: Runtime: 0:00:00.006963 2026-06-21 20:38:23.970111 | 2026-06-21 20:38:23.970290 | TASK [diagnose-network : Probe container network namespace (teardown)] 2026-06-21 20:38:30.100505 | debian-bookworm | ok: Runtime: 0:00:00.012965 2026-06-21 20:38:30.177532 | ubuntu-noble | ok: Runtime: 0:00:00.007083 2026-06-21 20:38:30.199354 | 2026-06-21 20:38:30.199552 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-21 20:38:30.283934 | debian-bookworm | ok 2026-06-21 20:38:30.290630 | ubuntu-noble | ok 2026-06-21 20:38:30.298669 | 2026-06-21 20:38:30.298796 | TASK [fetch-output : Set log path for single node] 2026-06-21 20:38:30.330594 | debian-bookworm | skipping: Conditional result was False 2026-06-21 20:38:30.351989 | ubuntu-noble | skipping: Conditional result was False 2026-06-21 20:38:30.362003 | 2026-06-21 20:38:30.362176 | LOOP [fetch-output : Ensure local output dirs] 2026-06-21 20:38:30.675345 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/logs/debian-bookworm" 2026-06-21 20:38:30.678213 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/logs/ubuntu-noble" 2026-06-21 20:38:30.940311 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/artifacts" 2026-06-21 20:38:31.027987 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/artifacts" 2026-06-21 20:38:31.239911 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/docs" 2026-06-21 20:38:31.345450 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/f6397b7ef3314158a8c9a7e89cc507c6/work/docs" 2026-06-21 20:38:31.345676 | debian-bookworm -> localhost | changed: All items complete 2026-06-21 20:38:31.345717 | 2026-06-21 20:38:31.368000 | 2026-06-21 20:38:31.368336 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-21 20:38:32.196785 | ubuntu-noble | changed: 2026-06-21 20:38:32.197109 | ubuntu-noble | .d..t...... ./ 2026-06-21 20:38:32.197148 | ubuntu-noble | >f+++++++++ net-debug.post.txt 2026-06-21 20:38:32.197173 | ubuntu-noble | >f+++++++++ net-debug.pre.txt 2026-06-21 20:38:32.197195 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-21 20:38:32.197218 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-21 20:38:32.197238 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-21 20:38:32.202752 | debian-bookworm | changed: 2026-06-21 20:38:32.202878 | debian-bookworm | .d..t...... ./ 2026-06-21 20:38:32.202910 | debian-bookworm | >f+++++++++ net-debug.post.txt 2026-06-21 20:38:32.202932 | debian-bookworm | >f+++++++++ net-debug.pre.txt 2026-06-21 20:38:32.202953 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-21 20:38:32.202972 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-21 20:38:32.202991 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-21 20:38:32.832573 | ubuntu-noble | changed: .d..t...... ./ 2026-06-21 20:38:32.845637 | debian-bookworm | ok 2026-06-21 20:38:33.445860 | ubuntu-noble | changed: .d..t...... ./ 2026-06-21 20:38:33.474143 | debian-bookworm | ok 2026-06-21 20:38:33.474296 | debian-bookworm | changed: All items complete 2026-06-21 20:38:33.474330 | 2026-06-21 20:38:33.513049 | 2026-06-21 20:38:33.513230 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-21 20:38:33.877426 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.011693 2026-06-21 20:38:34.182007 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.006510 2026-06-21 20:38:34.204801 | 2026-06-21 20:38:34.204938 | PLAY RECAP 2026-06-21 20:38:34.204991 | debian-bookworm | ok: 8 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-21 20:38:34.205033 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-21 20:38:34.205055 | 2026-06-21 20:38:34.367501 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-21 20:38:34.369205 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-21 20:38:35.234019 | 2026-06-21 20:38:35.234209 | PLAY [Base post] 2026-06-21 20:38:35.248768 | 2026-06-21 20:38:35.248931 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-21 20:38:36.118630 | debian-bookworm | changed 2026-06-21 20:38:36.159950 | ubuntu-noble | changed 2026-06-21 20:38:36.172841 | 2026-06-21 20:38:36.172973 | PLAY RECAP 2026-06-21 20:38:36.173064 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-21 20:38:36.173104 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-21 20:38:36.173130 | 2026-06-21 20:38:36.328323 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-21 20:38:36.329882 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-21 20:38:37.190976 | 2026-06-21 20:38:37.191178 | PLAY [Base post-logs] 2026-06-21 20:38:37.204201 | 2026-06-21 20:38:37.204395 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-21 20:38:37.703871 | localhost | changed 2026-06-21 20:38:37.721010 | 2026-06-21 20:38:37.721210 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-21 20:38:37.759692 | localhost | ok 2026-06-21 20:38:37.767701 | 2026-06-21 20:38:37.767886 | TASK [Set zuul-log-path fact] 2026-06-21 20:38:37.786165 | localhost | ok 2026-06-21 20:38:37.805208 | 2026-06-21 20:38:37.805415 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-21 20:38:37.843904 | localhost | ok 2026-06-21 20:38:37.848557 | 2026-06-21 20:38:37.848756 | TASK [upload-logs : Create log directories] 2026-06-21 20:38:38.403330 | localhost | changed 2026-06-21 20:38:38.407429 | 2026-06-21 20:38:38.407575 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-21 20:38:38.950236 | localhost -> localhost | ok: Runtime: 0:00:00.007487 2026-06-21 20:38:38.959634 | 2026-06-21 20:38:38.959823 | TASK [upload-logs : Upload logs to log server] 2026-06-21 20:38:39.576452 | localhost | Output suppressed because no_log was given 2026-06-21 20:38:39.578449 | 2026-06-21 20:38:39.578574 | LOOP [upload-logs : Compress console log and json output] 2026-06-21 20:38:39.629825 | localhost | skipping: Conditional result was False 2026-06-21 20:38:39.636049 | localhost | skipping: Conditional result was False 2026-06-21 20:38:39.648841 | 2026-06-21 20:38:39.649044 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-21 20:38:39.701857 | localhost | skipping: Conditional result was False 2026-06-21 20:38:39.702229 | 2026-06-21 20:38:39.707327 | localhost | skipping: Conditional result was False 2026-06-21 20:38:39.721950 | 2026-06-21 20:38:39.722377 | LOOP [upload-logs : Upload console log and json output]