2026-06-02 09:41:47.679658 | Job console starting 2026-06-02 09:41:47.719585 | Updating git repos 2026-06-02 09:41:47.788113 | Cloning repos into workspace 2026-06-02 09:41:47.853038 | Restoring repo states 2026-06-02 09:41:47.878374 | Merging changes 2026-06-02 09:41:48.430529 | Checking out repos 2026-06-02 09:41:48.492623 | Preparing playbooks 2026-06-02 09:41:49.358992 | Running Ansible setup 2026-06-02 09:41:54.797673 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 09:41:55.616314 | 2026-06-02 09:41:55.616491 | PLAY [Base pre] 2026-06-02 09:41:55.634713 | 2026-06-02 09:41:55.634888 | TASK [Setup log path fact] 2026-06-02 09:41:55.666212 | debian-bookworm | ok 2026-06-02 09:41:55.681849 | 2026-06-02 09:41:55.682021 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 09:41:55.722299 | debian-bookworm | ok 2026-06-02 09:41:55.733101 | 2026-06-02 09:41:55.733237 | TASK [emit-job-header : Print job information] 2026-06-02 09:41:55.787206 | # Job Information 2026-06-02 09:41:55.787488 | Ansible Version: 2.16.14 2026-06-02 09:41:55.787542 | Job: ansible-collection-services-molecule-auditd 2026-06-02 09:41:55.787593 | Pipeline: check 2026-06-02 09:41:55.787629 | Executor: 521e9411259a 2026-06-02 09:41:55.787660 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 09:41:55.787695 | Event ID: 3f03c490-5e67-11f1-8c7f-5eadf2133ab4 2026-06-02 09:41:55.804228 | 2026-06-02 09:41:55.804555 | LOOP [emit-job-header : Print node information] 2026-06-02 09:41:55.947705 | debian-bookworm | ok: 2026-06-02 09:41:55.948350 | debian-bookworm | # Node Information 2026-06-02 09:41:55.948519 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 09:41:55.948574 | debian-bookworm | Hostname: debian 2026-06-02 09:41:55.948612 | debian-bookworm | Username: zuul 2026-06-02 09:41:55.948647 | debian-bookworm | Distro: Debian 12.14 2026-06-02 09:41:55.948686 | debian-bookworm | Provider: regiocloud-a 2026-06-02 09:41:55.948721 | debian-bookworm | Region: 2026-06-02 09:41:55.948758 | debian-bookworm | Label: debian-bookworm 2026-06-02 09:41:55.948790 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 09:41:55.948821 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fec1:37a6 2026-06-02 09:41:55.998202 | debian-bookworm | ok: 2026-06-02 09:41:55.998386 | debian-bookworm | # Node Information 2026-06-02 09:41:55.998441 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 09:41:55.998484 | debian-bookworm | Hostname: ubuntu 2026-06-02 09:41:55.998527 | debian-bookworm | Username: zuul 2026-06-02 09:41:55.998566 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 09:41:55.998601 | debian-bookworm | Provider: regiocloud-a 2026-06-02 09:41:55.998651 | debian-bookworm | Region: 2026-06-02 09:41:55.998710 | debian-bookworm | Label: ubuntu-noble 2026-06-02 09:41:55.998767 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 09:41:55.998802 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe0a:5337 2026-06-02 09:41:56.019270 | 2026-06-02 09:41:56.019472 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 09:41:56.560372 | debian-bookworm -> localhost | changed 2026-06-02 09:41:56.569167 | 2026-06-02 09:41:56.569321 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 09:41:57.702111 | ubuntu-noble -> localhost | changed 2026-06-02 09:41:57.754801 | debian-bookworm -> localhost | ok 2026-06-02 09:41:57.782568 | 2026-06-02 09:41:57.782765 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 09:41:58.084318 | debian-bookworm -> localhost | ok 2026-06-02 09:41:58.090988 | 2026-06-02 09:41:58.091212 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 09:41:58.117240 | debian-bookworm | ok 2026-06-02 09:41:58.131992 | ubuntu-noble | ok 2026-06-02 09:41:58.151461 | debian-bookworm | included: /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 09:41:58.151573 | ubuntu-noble | included: /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 09:41:58.158438 | 2026-06-02 09:41:58.158538 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 09:42:00.052427 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 09:42:00.052788 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/f809423eb801490cbb82cbb1b4eb8ab1_id_rsa 2026-06-02 09:42:00.052851 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/f809423eb801490cbb82cbb1b4eb8ab1_id_rsa.pub 2026-06-02 09:42:00.052893 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 09:42:00.052930 | debian-bookworm -> localhost | SHA256:bXnHwiSBT8ho7G4uDU89xxS+ReVnu2RrNVzV/G0G6CY zuul-build-sshkey 2026-06-02 09:42:00.052964 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 09:42:00.053000 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 09:42:00.053032 | debian-bookworm -> localhost | | . o o. o..o| 2026-06-02 09:42:00.053064 | debian-bookworm -> localhost | | + + o.o.. +| 2026-06-02 09:42:00.053093 | debian-bookworm -> localhost | | o +.+. ..*| 2026-06-02 09:42:00.053121 | debian-bookworm -> localhost | | . .E=+..oB| 2026-06-02 09:42:00.053148 | debian-bookworm -> localhost | | . .So+=+ oO.| 2026-06-02 09:42:00.053176 | debian-bookworm -> localhost | | . + o.+. oo =| 2026-06-02 09:42:00.053204 | debian-bookworm -> localhost | | B o + | 2026-06-02 09:42:00.053233 | debian-bookworm -> localhost | | . + . | 2026-06-02 09:42:00.053261 | debian-bookworm -> localhost | | . | 2026-06-02 09:42:00.053304 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 09:42:00.053384 | debian-bookworm -> localhost | ok: Runtime: 0:00:01.358006 2026-06-02 09:42:00.061964 | 2026-06-02 09:42:00.062089 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 09:42:00.097121 | debian-bookworm | ok 2026-06-02 09:42:00.101317 | ubuntu-noble | ok 2026-06-02 09:42:00.116204 | debian-bookworm | included: /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 09:42:00.116283 | ubuntu-noble | included: /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 09:42:00.127482 | 2026-06-02 09:42:00.127582 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 09:42:00.153962 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:42:00.165550 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:42:00.174259 | 2026-06-02 09:42:00.174418 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 09:42:00.921540 | debian-bookworm | changed 2026-06-02 09:42:00.927437 | ubuntu-noble | changed 2026-06-02 09:42:00.933008 | 2026-06-02 09:42:00.933108 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 09:42:01.217466 | debian-bookworm | ok 2026-06-02 09:42:01.250943 | ubuntu-noble | ok 2026-06-02 09:42:01.260549 | 2026-06-02 09:42:01.260724 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 09:42:01.972249 | debian-bookworm | changed 2026-06-02 09:42:01.980130 | ubuntu-noble | changed 2026-06-02 09:42:01.988772 | 2026-06-02 09:42:01.988902 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 09:42:02.720990 | debian-bookworm | changed 2026-06-02 09:42:02.725749 | ubuntu-noble | changed 2026-06-02 09:42:02.731464 | 2026-06-02 09:42:02.731568 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 09:42:02.748213 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:42:02.759400 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:42:02.765740 | 2026-06-02 09:42:02.765859 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 09:42:03.178354 | debian-bookworm -> localhost | changed 2026-06-02 09:42:03.198534 | 2026-06-02 09:42:03.198699 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 09:42:03.539217 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/f809423eb801490cbb82cbb1b4eb8ab1_id_rsa (zuul-build-sshkey) 2026-06-02 09:42:03.539594 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.017684 2026-06-02 09:42:03.556856 | 2026-06-02 09:42:03.557049 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 09:42:03.919168 | debian-bookworm | ok 2026-06-02 09:42:03.928496 | ubuntu-noble | ok 2026-06-02 09:42:03.933734 | 2026-06-02 09:42:03.933843 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 09:42:03.963821 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:42:03.986150 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:42:04.019695 | 2026-06-02 09:42:04.019843 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 09:42:04.448918 | debian-bookworm | ok 2026-06-02 09:42:04.454751 | ubuntu-noble | ok 2026-06-02 09:42:04.471180 | 2026-06-02 09:42:04.471325 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 09:42:04.512753 | debian-bookworm | ok 2026-06-02 09:42:04.517835 | ubuntu-noble | ok 2026-06-02 09:42:04.525215 | 2026-06-02 09:42:04.525350 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 09:42:04.822451 | debian-bookworm -> localhost | ok 2026-06-02 09:42:04.829516 | 2026-06-02 09:42:04.829632 | TASK [validate-host : Collect information about the host] 2026-06-02 09:42:06.003504 | ubuntu-noble | ok 2026-06-02 09:42:06.026306 | debian-bookworm | ok 2026-06-02 09:42:06.047421 | 2026-06-02 09:42:06.047575 | TASK [validate-host : Sanitize hostname] 2026-06-02 09:42:06.167056 | debian-bookworm | ok 2026-06-02 09:42:06.172462 | ubuntu-noble | ok 2026-06-02 09:42:06.177575 | 2026-06-02 09:42:06.177710 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 09:42:06.953688 | ubuntu-noble -> localhost | changed 2026-06-02 09:42:06.967210 | debian-bookworm -> localhost | changed 2026-06-02 09:42:06.978082 | 2026-06-02 09:42:06.978221 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 09:42:07.504745 | ubuntu-noble | ok 2026-06-02 09:42:07.510168 | debian-bookworm | ok 2026-06-02 09:42:07.515769 | 2026-06-02 09:42:07.515934 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 09:42:08.091853 | debian-bookworm -> localhost | changed 2026-06-02 09:42:08.234498 | ubuntu-noble -> localhost | changed 2026-06-02 09:42:08.251681 | 2026-06-02 09:42:08.251805 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 09:42:08.553080 | debian-bookworm | ok 2026-06-02 09:42:08.558140 | ubuntu-noble | ok 2026-06-02 09:42:08.564609 | 2026-06-02 09:42:08.564723 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 09:42:09.802696 | debian-bookworm | changed: 2026-06-02 09:42:09.803031 | debian-bookworm | cd+++++++++ src/ 2026-06-02 09:42:09.803071 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 09:42:09.803097 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 09:42:09.803120 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 09:42:09.803141 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:20.994072 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:21.026991 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:21.547308 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:21.547919 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:21.569499 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:21.575382 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 09:43:21.575486 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:21.542080 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:21.542736 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:21.564115 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:21.569677 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 09:43:21.569746 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:22.771106 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 09:43:22.771407 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 09:43:23.127729 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 09:43:23.128179 | debian-bookworm | config file = None 2026-06-02 09:43:23.128623 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 09:43:23.129083 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 09:43:23.129517 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 09:43:23.129859 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 09:43:23.130180 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 09:43:23.130682 | debian-bookworm | jinja version = 3.1.6 2026-06-02 09:43:23.130959 | debian-bookworm | libyaml = True 2026-06-02 09:43:23.131222 | debian-bookworm | No config file found; using defaults 2026-06-02 09:43:23.131668 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 09:43:23.169533 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 09:43:23.169939 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 09:43:23.171251 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 09:43:23.171711 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 09:43:23.172109 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 09:43:23.172559 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 09:43:23.173389 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 09:43:23.173774 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 09:43:23.174153 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 09:43:23.174605 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 09:43:23.175392 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 09:43:23.175774 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 09:43:23.176145 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 09:43:23.176550 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 09:43:23.176922 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 09:43:23.177290 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 09:43:23.177973 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 09:43:23.178372 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 09:43:23.179280 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 09:43:23.179707 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 09:43:23.180034 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 09:43:23.180326 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 09:43:23.180668 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 09:43:23.180929 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 09:43:23.181262 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 09:43:23.181538 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 09:43:23.182436 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 09:43:23.182715 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 09:43:23.183006 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 09:43:23.183287 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 09:43:23.183693 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 09:43:23.183971 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 09:43:23.184615 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 09:43:23.184882 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 09:43:23.187641 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 09:43:23.187997 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 09:43:23.188842 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 09:43:23.189108 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 09:43:23.190568 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 09:43:23.190839 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 09:43:23.191365 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 09:43:23.191659 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 09:43:23.191944 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 09:43:23.192221 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 09:43:23.193840 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 09:43:23.194110 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 09:43:23.194528 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 09:43:23.194810 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 09:43:23.195154 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 09:43:23.195450 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 09:43:23.195730 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 09:43:23.196005 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 09:43:23.196456 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 09:43:23.196728 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 09:43:23.197779 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 09:43:23.198100 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 09:43:23.198467 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 09:43:23.198823 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 09:43:23.200334 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 09:43:23.200653 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 09:43:23.201090 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 09:43:23.201399 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 09:43:23.202145 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 09:43:23.202518 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 09:43:23.202882 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 09:43:23.203199 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 09:43:23.203671 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 09:43:23.203967 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 09:43:23.204346 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 09:43:23.204632 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 09:43:23.204948 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 09:43:23.205229 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 09:43:23.205491 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 09:43:23.205721 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 09:43:23.206136 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 09:43:23.206494 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 09:43:23.207342 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 09:43:23.207692 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 09:43:23.208037 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 09:43:23.208393 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 09:43:23.208798 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 09:43:23.209152 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 09:43:23.209419 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 09:43:23.209723 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 09:43:23.210018 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 09:43:23.210345 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 09:43:23.211132 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 09:43:23.211476 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 09:43:23.211836 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 09:43:23.212193 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 09:43:23.214152 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 09:43:23.214428 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 09:43:23.214777 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 09:43:23.215062 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 09:43:23.215755 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 09:43:23.216441 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 09:43:23.216732 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 09:43:23.216929 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 09:43:23.217183 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 09:43:23.217487 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 09:43:23.217744 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 09:43:23.217984 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 09:43:23.219089 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 09:43:23.219392 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 09:43:23.220171 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 09:43:23.220436 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 09:43:23.226384 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 09:43:23.226639 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 09:43:23.227276 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 09:43:23.227582 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 09:43:23.228724 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 09:43:23.228942 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 09:43:23.229587 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 09:43:23.229794 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 09:43:23.231531 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 09:43:23.231806 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 09:43:23.235122 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 09:43:23.235360 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 09:43:23.235714 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 09:43:23.235996 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 09:43:23.237360 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 09:43:23.237559 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 09:43:23.237879 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 09:43:23.238174 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 09:43:23.238423 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 09:43:23.238769 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 09:43:23.238958 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 09:43:23.239271 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 09:43:23.241178 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 09:43:23.241416 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 09:43:23.241684 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 09:43:23.241977 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 09:43:23.242742 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 09:43:23.242941 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 09:43:23.243128 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 09:43:23.243838 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 09:43:23.244202 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 09:43:23.244472 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 09:43:23.245000 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 09:43:23.245350 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 09:43:23.245644 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 09:43:23.245949 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 09:43:23.246250 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 09:43:23.246646 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 09:43:23.246876 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 09:43:23.247181 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 09:43:23.247427 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 09:43:23.247735 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 09:43:23.247972 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 09:43:23.248270 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 09:43:23.248520 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 09:43:23.248823 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 09:43:23.249126 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 09:43:23.249485 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 09:43:23.249841 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 09:43:23.250127 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 09:43:23.250811 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 09:43:23.251085 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 09:43:23.255409 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 09:43:23.255890 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 09:43:23.256276 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 09:43:23.256632 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 09:43:23.257103 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 09:43:23.257424 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 09:43:23.257714 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 09:43:23.258141 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 09:43:23.258535 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 09:43:23.258822 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 09:43:23.259220 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 09:43:23.259540 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 09:43:23.259830 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 09:43:23.260118 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 09:43:23.261454 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 09:43:23.261799 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 09:43:23.262132 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 09:43:23.262617 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 09:43:23.262882 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 09:43:23.263233 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 09:43:23.263513 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 09:43:23.263764 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 09:43:23.264102 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 09:43:23.264449 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 09:43:23.266209 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 09:43:23.266588 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 09:43:23.266951 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 09:43:23.267228 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 09:43:23.268103 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 09:43:23.268437 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 09:43:23.268986 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 09:43:23.269255 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 09:43:23.269692 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 09:43:23.269981 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 09:43:23.278886 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 09:43:23.279090 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 09:43:23.279420 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 09:43:23.279771 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 09:43:23.284609 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 09:43:23.284907 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 09:43:23.288700 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 09:43:23.289065 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 09:43:23.289363 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 09:43:22.831495 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 09:43:22.831545 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 09:43:23.213456 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 09:43:23.213502 | ubuntu-noble | config file = None 2026-06-02 09:43:23.213510 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 09:43:23.213516 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 09:43:23.213789 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 09:43:23.214122 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 09:43:23.214458 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 09:43:23.214739 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 09:43:23.215071 | ubuntu-noble | libyaml = True 2026-06-02 09:43:23.215357 | ubuntu-noble | No config file found; using defaults 2026-06-02 09:43:23.215867 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 09:43:23.225490 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 09:43:23.225919 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 09:43:23.236308 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 09:43:23.236727 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 09:43:23.237700 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 09:43:23.238140 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 09:43:23.239595 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 09:43:23.240034 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 09:43:23.240438 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 09:43:23.240825 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 09:43:23.241480 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 09:43:23.241853 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 09:43:23.245698 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 09:43:23.246062 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 09:43:23.246394 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 09:43:23.246770 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 09:43:23.267925 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 09:43:23.268258 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 09:43:23.268629 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 09:43:23.268987 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 09:43:23.270189 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 09:43:23.270569 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 09:43:23.270920 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 09:43:23.271267 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 09:43:23.271792 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 09:43:23.272169 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 09:43:23.273273 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 09:43:23.274438 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 09:43:23.274512 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 09:43:23.274803 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 09:43:23.275147 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 09:43:23.276191 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 09:43:23.277004 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 09:43:23.277496 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 09:43:23.277827 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 09:43:23.278300 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 09:43:23.278643 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 09:43:23.279524 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 09:43:23.280054 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 09:43:23.280377 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 09:43:23.281482 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 09:43:23.281767 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 09:43:23.282425 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 09:43:23.282707 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 09:43:23.283184 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 09:43:23.283489 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 09:43:23.286300 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 09:43:23.286579 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 09:43:23.287082 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 09:43:23.287441 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 09:43:23.287811 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 09:43:23.288125 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 09:43:23.288661 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 09:43:23.290449 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 09:43:23.290470 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 09:43:23.290475 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 09:43:23.290479 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 09:43:23.290483 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 09:43:23.290487 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 09:43:23.290491 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 09:43:23.292792 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 09:43:23.293151 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 09:43:23.293376 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 09:43:23.293745 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 09:43:23.294311 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 09:43:23.294639 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 09:43:23.295339 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 09:43:23.295653 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 09:43:23.295919 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 09:43:23.296246 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 09:43:23.296979 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 09:43:23.297291 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 09:43:23.299002 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 09:43:23.299388 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 09:43:23.299734 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 09:43:23.300070 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 09:43:23.301591 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 09:43:23.301943 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 09:43:23.302627 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 09:43:23.302973 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 09:43:23.547011 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 09:43:23.547491 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 09:43:23.341214 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 09:43:23.341553 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 09:43:23.343963 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 09:43:23.344275 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 09:43:23.344601 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 09:43:23.344965 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 09:43:23.345353 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 09:43:23.345691 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 09:43:23.346028 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 09:43:23.346331 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 09:43:23.346658 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 09:43:23.346983 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 09:43:23.347286 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 09:43:23.347613 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 09:43:23.356630 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 09:43:23.356955 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 09:43:23.357242 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 09:43:23.357670 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 09:43:23.358184 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 09:43:23.358488 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 09:43:23.358771 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 09:43:23.359085 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 09:43:23.359534 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 09:43:23.359817 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 09:43:23.361441 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 09:43:23.361463 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 09:43:23.361468 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 09:43:23.361472 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 09:43:23.361477 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 09:43:23.361560 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 09:43:23.362499 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 09:43:23.362834 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 09:43:23.363953 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 09:43:23.364292 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 09:43:23.364621 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 09:43:23.364914 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 09:43:23.365433 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 09:43:23.365690 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 09:43:23.366066 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 09:43:23.366327 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 09:43:23.367075 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 09:43:23.367330 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 09:43:23.367826 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 09:43:23.368100 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 09:43:23.369072 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 09:43:23.369321 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 09:43:23.369599 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 09:43:23.369859 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 09:43:23.370382 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 09:43:23.370663 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 09:43:23.370941 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 09:43:23.371196 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 09:43:23.371646 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 09:43:23.371924 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 09:43:23.372312 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 09:43:23.372587 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 09:43:23.373095 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 09:43:23.373325 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 09:43:23.373732 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 09:43:23.374043 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 09:43:23.375039 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 09:43:23.375281 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 09:43:23.375847 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 09:43:23.376100 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 09:43:23.376535 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 09:43:23.376761 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 09:43:23.377640 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 09:43:23.377920 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 09:43:23.378421 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 09:43:23.378660 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 09:43:23.380493 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 09:43:23.380533 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 09:43:23.380542 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 09:43:23.380550 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 09:43:23.382344 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 09:43:23.382367 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 09:43:23.382947 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 09:43:23.382968 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 09:43:23.383623 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 09:43:23.383644 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 09:43:23.385230 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 09:43:23.385254 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 09:43:23.385261 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 09:43:23.385268 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 09:43:23.385274 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 09:43:23.385308 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 09:43:23.387308 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 09:43:23.387329 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 09:43:23.388311 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 09:43:23.388330 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 09:43:23.389115 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 09:43:23.389135 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 09:43:23.389141 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 09:43:23.389375 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 09:43:23.389642 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 09:43:23.389922 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 09:43:23.390275 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 09:43:23.390514 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 09:43:23.391497 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 09:43:23.391786 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 09:43:23.395156 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 09:43:23.395461 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 09:43:23.395797 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 09:43:23.396040 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 09:43:23.396313 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 09:43:23.396596 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 09:43:23.396818 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 09:43:23.397047 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 09:43:23.397264 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 09:43:23.397509 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 09:43:23.397804 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 09:43:23.398065 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 09:43:23.400289 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 09:43:23.400351 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 09:43:23.400367 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 09:43:23.400378 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 09:43:23.400911 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 09:43:23.401392 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 09:43:23.405061 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 09:43:23.405566 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 09:43:23.405952 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 09:43:23.637823 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 09:43:23.638535 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 09:43:24.125387 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 09:43:24.374784 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 09:43:24.900093 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 09:43:25.516894 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 09:43:25.517484 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 09:43:25.584204 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 09:43:26.163755 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 09:43:26.165977 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 09:43:27.080493 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 09:43:27.080668 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 09:43:27.248650 | debian-bookworm | Starting galaxy collection install process 2026-06-02 09:43:27.248967 | debian-bookworm | Process install dependency map 2026-06-02 09:43:27.249275 | debian-bookworm | Starting collection install process 2026-06-02 09:43:27.249680 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 09:43:27.249989 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 09:43:27.250280 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 09:43:27.250675 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 09:43:27.250985 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1838kr1fjr6r/tmpodnu8o4x/osism-commons-0.20260601.0-lyn4alol 2026-06-02 09:43:27.251282 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 09:43:27.251697 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 09:43:27.337668 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 09:43:27.337901 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 09:43:27.338747 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 09:43:27.572105 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 09:43:27.574477 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 09:43:27.742734 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 09:43:27.742936 | ubuntu-noble | Process install dependency map 2026-06-02 09:43:27.743062 | ubuntu-noble | Starting collection install process 2026-06-02 09:43:27.745521 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 09:43:27.745909 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 09:43:27.746227 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 09:43:27.746597 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 09:43:27.746961 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-16618lvjtb5s/tmp07yfrxa6/osism-commons-0.20260601.0-yta5heu2 2026-06-02 09:43:27.747259 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 09:43:27.747618 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 09:43:27.814957 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 09:43:27.815360 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 09:43:27.816937 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 09:43:28.334898 | debian-bookworm | ok: Runtime: 0:00:06.840431 2026-06-02 09:43:28.349981 | ubuntu-noble | ok: Runtime: 0:00:07.237826 2026-06-02 09:43:28.361675 | 2026-06-02 09:43:28.361813 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 09:43:29.012180 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:43:29.012850 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:43:29.018815 | 2026-06-02 09:43:29.019155 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 09:43:29.694128 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:29.704360 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:29.759142 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:29.769651 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:30.172445 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:30.173052 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:30.193725 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:30.199469 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 09:43:30.199540 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:30.253460 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:30.254108 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:30.274155 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:30.279675 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 09:43:30.279754 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:31.431803 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 09:43:31.561840 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 09:43:31.791710 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 09:43:31.791792 | debian-bookworm | config file = None 2026-06-02 09:43:31.791810 | debian-bookworm | configured module search path = 2026-06-02 09:43:31.791816 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 09:43:31.791824 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 09:43:31.791828 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 09:43:31.791833 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 09:43:31.791837 | debian-bookworm | jinja version = 3.1.6 2026-06-02 09:43:31.791841 | debian-bookworm | libyaml = True 2026-06-02 09:43:31.791972 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:43:31.791978 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:43:31.791983 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:43:31.791987 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:43:31.791991 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:43:31.791995 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 09:43:31.791999 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:43:31.792002 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 09:43:31.792006 | debian-bookworm | 2026-06-02 09:43:31.792213 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:43:31.792219 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 09:43:31.792223 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:43:31.792227 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 09:43:31.792231 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:43:31.792235 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:43:31.792239 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:43:31.792243 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:43:31.792247 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:43:31.792252 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:43:31.792256 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:43:31.792260 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:43:31.792264 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:43:31.792267 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:43:31.792271 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:43:31.792275 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:31.792280 | debian-bookworm | 2026-06-02 09:43:31.792693 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:32.064438 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 09:43:31.906984 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 09:43:31.907035 | ubuntu-noble | config file = None 2026-06-02 09:43:31.907050 | ubuntu-noble | configured module search path = 2026-06-02 09:43:31.907056 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 09:43:31.907061 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 09:43:31.907065 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 09:43:31.907069 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 09:43:31.907073 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 09:43:31.907077 | ubuntu-noble | libyaml = True 2026-06-02 09:43:31.907133 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:43:31.907138 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:43:31.907142 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:43:31.907146 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:43:31.907150 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:43:31.907154 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 09:43:31.907158 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:43:31.907162 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 09:43:31.907166 | ubuntu-noble | 2026-06-02 09:43:31.907223 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:43:31.907229 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 09:43:31.907232 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:43:31.907236 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 09:43:31.907240 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:43:31.907244 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:43:31.907248 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:43:31.907252 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:43:31.907256 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:43:31.907260 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:43:31.907264 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:43:31.907268 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:43:31.907272 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:43:31.907276 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:43:31.907280 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:43:31.907284 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:31.907288 | ubuntu-noble | 2026-06-02 09:43:31.907382 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:32.315344 | debian-bookworm | 2026-06-02 09:43:32.315891 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 09:43:32.316468 | debian-bookworm | 2026-06-02 09:43:32.316996 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 09:43:32.204484 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 09:43:32.448133 | ubuntu-noble | 2026-06-02 09:43:32.448518 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 09:43:32.448824 | ubuntu-noble | 2026-06-02 09:43:32.450538 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 09:43:33.440867 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 09:43:33.440993 | debian-bookworm | 2026-06-02 09:43:33.441408 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 09:43:33.602945 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 09:43:33.603025 | ubuntu-noble | 2026-06-02 09:43:33.603144 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 09:43:37.993202 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.4 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.4 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:37.993520 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:37.993705 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:37.993846 | debian-bookworm | 2026-06-02 09:43:37.993990 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 09:43:38.021373 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 09:43:38.021484 | debian-bookworm | 2026-06-02 09:43:38.021630 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 09:43:38.021778 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 09:43:38.021898 | debian-bookworm | 2026-06-02 09:43:38.137000 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 09:43:38.137068 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 09:43:38.298919 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.1 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.1 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:38.302459 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:38.302488 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 09:43:38.302555 | ubuntu-noble | 2026-06-02 09:43:38.302695 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 09:43:38.321827 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 09:43:38.321988 | ubuntu-noble | 2026-06-02 09:43:38.322120 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 09:43:38.322243 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 09:43:38.322349 | ubuntu-noble | 2026-06-02 09:43:38.399134 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 09:43:38.400494 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 09:43:38.623445 | debian-bookworm | ok: Runtime: 0:00:08.827041 2026-06-02 09:43:38.635004 | ubuntu-noble | ok: Runtime: 0:00:09.059748 2026-06-02 09:43:38.649594 | 2026-06-02 09:43:38.649766 | TASK [ansible-molecule : Reset connection] 2026-06-02 09:43:38.693061 | 2026-06-02 09:43:38.693251 | TASK [ansible-molecule : Reset connection] 2026-06-02 09:43:38.747370 | 2026-06-02 09:43:38.747588 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 09:43:39.621414 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:39.631503 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:39.637570 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:39.654201 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:40.104289 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:40.105213 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:40.128051 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:40.133756 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 09:43:40.133847 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:40.133084 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:40.133743 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:40.155062 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:40.160792 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 09:43:40.160871 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:41.369695 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 09:43:41.369993 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 09:43:41.751562 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 09:43:41.752754 | debian-bookworm | config file = None 2026-06-02 09:43:41.752770 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 09:43:41.752776 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 09:43:41.752790 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 09:43:41.752801 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 09:43:41.752806 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 09:43:41.752811 | debian-bookworm | jinja version = 3.1.6 2026-06-02 09:43:41.752815 | debian-bookworm | libyaml = True 2026-06-02 09:43:41.752820 | debian-bookworm | No config file found; using defaults 2026-06-02 09:43:41.752825 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 09:43:41.752830 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 09:43:41.752834 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 09:43:41.752839 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 09:43:41.752843 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 09:43:41.752847 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 09:43:41.752853 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 09:43:41.752913 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 09:43:41.754153 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 09:43:41.754184 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 09:43:41.754190 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 09:43:41.754213 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 09:43:41.754218 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 09:43:41.755827 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 09:43:41.755955 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 09:43:41.756148 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 09:43:41.756289 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 09:43:41.756901 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 09:43:41.757229 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 09:43:41.757852 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 09:43:41.758109 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 09:43:41.758512 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 09:43:41.758697 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 09:43:41.759046 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 09:43:41.759316 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 09:43:41.760143 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 09:43:41.761509 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 09:43:41.761854 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 09:43:41.762177 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 09:43:41.763274 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 09:43:41.764698 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 09:43:41.765107 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 09:43:41.765424 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 09:43:41.765797 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 09:43:41.766087 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 09:43:41.766563 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 09:43:41.766871 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 09:43:41.767250 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 09:43:41.767553 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 09:43:41.767763 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 09:43:41.768060 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 09:43:41.768747 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 09:43:41.769056 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 09:43:41.769449 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 09:43:41.769778 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 09:43:41.770059 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 09:43:41.770383 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 09:43:41.770877 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 09:43:41.771163 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 09:43:41.783453 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 09:43:41.783524 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 09:43:41.786699 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 09:43:41.787177 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 09:43:41.789124 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 09:43:41.790666 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 09:43:41.791054 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 09:43:41.791247 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 09:43:41.791598 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 09:43:41.791927 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 09:43:41.793310 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 09:43:41.478209 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 09:43:41.478779 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 09:43:41.795991 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 09:43:41.796603 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 09:43:41.796995 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 09:43:41.797379 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 09:43:41.797804 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 09:43:41.798146 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 09:43:41.798567 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 09:43:41.799075 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 09:43:41.799435 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 09:43:41.799846 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 09:43:41.800151 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 09:43:41.800515 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 09:43:41.800940 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 09:43:41.801242 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 09:43:41.801717 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 09:43:41.802736 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 09:43:41.803078 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 09:43:41.805615 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 09:43:41.806019 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 09:43:41.807323 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 09:43:41.807700 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 09:43:41.809576 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 09:43:41.810132 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 09:43:41.810671 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 09:43:41.811201 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 09:43:41.811819 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 09:43:41.812287 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 09:43:41.812758 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 09:43:41.813107 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 09:43:41.813567 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 09:43:41.813833 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 09:43:41.814522 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 09:43:41.814843 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 09:43:41.815183 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 09:43:41.815453 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 09:43:41.819832 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 09:43:41.820171 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 09:43:41.820506 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 09:43:41.820832 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 09:43:41.821963 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 09:43:41.822434 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 09:43:41.822811 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 09:43:41.823161 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 09:43:41.823985 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 09:43:41.824282 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 09:43:41.824633 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 09:43:41.824921 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 09:43:41.825188 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 09:43:41.825396 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 09:43:41.863644 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 09:43:41.864363 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 09:43:41.865150 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 09:43:41.865772 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 09:43:41.866525 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 09:43:41.867106 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 09:43:41.867601 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 09:43:41.867958 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 09:43:41.868465 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 09:43:41.868868 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 09:43:41.871233 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 09:43:41.871908 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 09:43:41.872555 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 09:43:41.873051 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 09:43:41.873776 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 09:43:41.874299 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 09:43:41.874971 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 09:43:41.875607 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 09:43:41.884008 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 09:43:41.885347 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 09:43:41.885967 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 09:43:41.886461 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 09:43:41.886941 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 09:43:41.887283 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 09:43:41.888056 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 09:43:41.888451 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 09:43:41.891054 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 09:43:41.891519 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 09:43:41.891827 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 09:43:41.892307 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 09:43:41.892852 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 09:43:41.893188 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 09:43:41.893675 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 09:43:41.893982 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 09:43:41.894535 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 09:43:41.894862 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 09:43:41.896734 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 09:43:41.897068 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 09:43:41.897393 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 09:43:41.897689 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 09:43:41.899680 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 09:43:41.900042 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 09:43:41.900373 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 09:43:41.900842 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 09:43:41.903110 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 09:43:41.903442 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 09:43:41.906697 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 09:43:41.908084 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 09:43:41.909662 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 09:43:41.910016 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 09:43:41.911038 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 09:43:41.911405 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 09:43:41.911770 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 09:43:41.912045 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 09:43:41.912384 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 09:43:41.914857 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 09:43:41.915868 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 09:43:41.916359 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 09:43:41.916761 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 09:43:41.917111 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 09:43:41.917449 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 09:43:41.917808 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 09:43:41.918377 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 09:43:41.918786 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 09:43:41.919130 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 09:43:41.919470 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 09:43:41.919858 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 09:43:41.920198 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 09:43:41.920547 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 09:43:41.921013 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 09:43:41.921364 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 09:43:41.921789 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 09:43:41.922144 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 09:43:41.922532 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 09:43:41.922935 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 09:43:41.923237 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 09:43:41.923596 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 09:43:41.923950 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 09:43:41.924193 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 09:43:41.924431 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 09:43:41.927451 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 09:43:41.927853 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 09:43:41.928126 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 09:43:41.928445 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 09:43:41.930553 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 09:43:41.930897 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 09:43:41.931216 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 09:43:41.931554 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 09:43:41.937124 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 09:43:41.937530 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 09:43:41.937846 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 09:43:41.939271 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 09:43:41.940885 | debian-bookworm | Starting galaxy collection install process 2026-06-02 09:43:41.941198 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 09:43:42.052417 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 09:43:42.052533 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 09:43:42.062550 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 09:43:42.064408 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 09:43:42.072891 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 09:43:42.072953 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 09:43:42.073040 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 09:43:42.081554 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 09:43:41.860461 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 09:43:41.860499 | ubuntu-noble | config file = None 2026-06-02 09:43:41.860507 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 09:43:41.860640 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 09:43:41.861014 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 09:43:41.861313 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 09:43:41.861647 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 09:43:41.861985 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 09:43:41.862265 | ubuntu-noble | libyaml = True 2026-06-02 09:43:41.862709 | ubuntu-noble | No config file found; using defaults 2026-06-02 09:43:41.863218 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 09:43:41.874022 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 09:43:41.874468 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 09:43:41.874796 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 09:43:41.876166 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 09:43:41.887164 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 09:43:41.887575 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 09:43:41.889758 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 09:43:41.890150 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 09:43:41.890563 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 09:43:41.890964 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 09:43:41.892433 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 09:43:41.892965 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 09:43:41.894082 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 09:43:41.894533 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 09:43:41.894953 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 09:43:41.895367 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 09:43:41.895830 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 09:43:41.896224 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 09:43:41.896928 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 09:43:41.899444 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 09:43:41.899466 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 09:43:41.899479 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 09:43:41.899485 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 09:43:41.899489 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 09:43:41.899493 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 09:43:41.899623 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 09:43:41.899925 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 09:43:41.900134 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 09:43:41.902045 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 09:43:41.902817 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 09:43:41.903710 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 09:43:41.904156 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 09:43:41.904573 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 09:43:41.904980 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 09:43:41.905380 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 09:43:41.905802 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 09:43:41.925513 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 09:43:41.925878 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 09:43:41.927156 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 09:43:41.927575 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 09:43:41.927903 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 09:43:41.928185 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 09:43:41.928578 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 09:43:41.928889 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 09:43:41.929148 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 09:43:41.929534 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 09:43:41.929911 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 09:43:41.930253 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 09:43:41.930617 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 09:43:41.931017 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 09:43:41.931331 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 09:43:41.931738 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 09:43:41.932054 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 09:43:41.932394 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 09:43:41.932781 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 09:43:41.933108 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 09:43:41.933767 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 09:43:41.934001 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 09:43:41.935034 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 09:43:41.937400 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 09:43:41.937985 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 09:43:41.938538 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 09:43:41.939539 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 09:43:41.939864 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 09:43:41.940195 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 09:43:41.940921 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 09:43:41.941308 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 09:43:41.941666 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 09:43:41.941922 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 09:43:41.942233 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 09:43:41.945853 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 09:43:41.946216 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 09:43:41.946744 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 09:43:41.947084 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 09:43:41.947546 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 09:43:41.949912 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 09:43:41.949936 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 09:43:41.949940 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 09:43:41.950452 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 09:43:41.950865 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 09:43:41.951287 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 09:43:41.951744 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 09:43:41.952469 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 09:43:41.952893 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 09:43:41.953755 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 09:43:41.954109 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 09:43:41.954554 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 09:43:41.954961 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 09:43:41.955245 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 09:43:41.955558 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 09:43:41.955890 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 09:43:41.956224 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 09:43:41.957186 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 09:43:41.957541 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 09:43:41.957821 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 09:43:41.958123 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 09:43:41.958551 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 09:43:41.958855 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 09:43:41.960164 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 09:43:41.960509 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 09:43:41.960824 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 09:43:41.961101 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 09:43:41.961368 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 09:43:41.961658 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 09:43:41.962004 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 09:43:41.962235 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 09:43:41.963079 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 09:43:41.963359 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 09:43:41.963661 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 09:43:41.963983 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 09:43:41.964312 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 09:43:41.964558 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 09:43:41.964782 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 09:43:41.965005 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 09:43:41.965424 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 09:43:41.965666 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 09:43:41.966698 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 09:43:41.966985 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 09:43:41.967371 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 09:43:41.967632 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 09:43:41.967920 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 09:43:41.968154 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 09:43:41.968418 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 09:43:41.968660 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 09:43:41.969078 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 09:43:41.969328 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 09:43:41.970299 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 09:43:41.970558 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 09:43:41.972215 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 09:43:41.972529 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 09:43:41.973101 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 09:43:41.973390 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 09:43:41.973627 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 09:43:41.973877 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 09:43:41.974038 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 09:43:41.974275 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 09:43:41.974943 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 09:43:41.975183 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 09:43:41.977971 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 09:43:41.978292 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 09:43:41.979342 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 09:43:41.979641 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 09:43:41.988665 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 09:43:41.989024 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 09:43:41.989302 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 09:43:41.989567 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 09:43:41.989784 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 09:43:41.990072 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 09:43:41.990449 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 09:43:41.990707 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 09:43:41.990952 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 09:43:41.991179 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 09:43:41.991651 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 09:43:41.991924 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 09:43:41.993546 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 09:43:41.993837 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 09:43:41.994139 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 09:43:41.994378 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 09:43:41.994562 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 09:43:41.994841 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 09:43:41.997543 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 09:43:41.997828 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 09:43:41.998185 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 09:43:41.998439 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 09:43:41.998676 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 09:43:41.998957 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 09:43:41.999346 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 09:43:41.999593 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 09:43:42.000046 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 09:43:42.000295 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 09:43:42.000611 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 09:43:42.000861 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 09:43:42.001013 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 09:43:42.001265 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 09:43:42.001501 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 09:43:42.001780 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 09:43:42.002203 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 09:43:42.002459 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 09:43:42.002714 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 09:43:42.002974 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 09:43:42.004392 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 09:43:42.004724 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 09:43:42.005465 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 09:43:42.005759 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 09:43:42.011501 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 09:43:42.011823 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 09:43:42.013951 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 09:43:42.014265 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 09:43:42.014500 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 09:43:42.014765 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 09:43:42.014947 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 09:43:42.015197 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 09:43:42.015587 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 09:43:42.015844 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 09:43:42.017169 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 09:43:42.017481 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 09:43:42.056467 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 09:43:42.056501 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 09:43:42.056512 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 09:43:42.056522 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 09:43:42.056816 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 09:43:42.057128 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 09:43:42.121159 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 09:43:42.121595 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 09:43:42.138130 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 09:43:42.140664 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 09:43:42.149723 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 09:43:42.149862 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 09:43:42.149969 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 09:43:42.157920 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 09:43:42.448669 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 09:43:42.448741 | debian-bookworm | config file = None 2026-06-02 09:43:42.448748 | debian-bookworm | configured module search path = 2026-06-02 09:43:42.448753 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 09:43:42.448759 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 09:43:42.448763 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 09:43:42.448768 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 09:43:42.448771 | debian-bookworm | jinja version = 3.1.6 2026-06-02 09:43:42.448776 | debian-bookworm | libyaml = True 2026-06-02 09:43:42.448957 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:43:42.448964 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:43:42.448969 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:43:42.448973 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:43:42.448977 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:43:42.448980 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 09:43:42.448984 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:43:42.448988 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 09:43:42.448992 | debian-bookworm | 2026-06-02 09:43:42.449190 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:43:42.449196 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 09:43:42.449200 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:43:42.449221 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 09:43:42.449225 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:43:42.449229 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:43:42.449237 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:43:42.449241 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:43:42.449245 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:43:42.449249 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:43:42.449253 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:43:42.449257 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:43:42.449261 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:43:42.449265 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:43:42.449268 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:43:42.449272 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:42.449276 | debian-bookworm | 2026-06-02 09:43:42.449707 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:42.735185 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 09:43:42.514498 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 09:43:42.514554 | ubuntu-noble | config file = None 2026-06-02 09:43:42.514560 | ubuntu-noble | configured module search path = 2026-06-02 09:43:42.514564 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 09:43:42.514569 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 09:43:42.514573 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 09:43:42.514577 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 09:43:42.514581 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 09:43:42.514585 | ubuntu-noble | libyaml = True 2026-06-02 09:43:42.514951 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:43:42.514958 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:43:42.514961 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:43:42.514965 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:43:42.514969 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:43:42.514973 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 09:43:42.514977 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:43:42.514980 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 09:43:42.514987 | ubuntu-noble | 2026-06-02 09:43:42.515191 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:43:42.515196 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 09:43:42.515200 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:43:42.515218 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 09:43:42.515222 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:43:42.515227 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:43:42.515231 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:43:42.515235 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:43:42.515239 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:43:42.515243 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:43:42.515246 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:43:42.515250 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:43:42.515254 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:43:42.515266 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:43:42.515270 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:43:42.515274 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:42.515278 | ubuntu-noble | 2026-06-02 09:43:42.515556 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:43:42.817484 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 09:43:42.978829 | debian-bookworm | 2026-06-02 09:43:42.979316 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 09:43:42.979530 | debian-bookworm | 2026-06-02 09:43:42.979786 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 09:43:43.044710 | ubuntu-noble | 2026-06-02 09:43:43.045064 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 09:43:43.045354 | ubuntu-noble | 2026-06-02 09:43:43.045755 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 09:43:44.256528 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 09:43:44.256740 | debian-bookworm | 2026-06-02 09:43:44.256961 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 09:43:44.295842 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 09:43:44.295913 | debian-bookworm | 2026-06-02 09:43:44.296011 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 09:43:44.223056 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 09:43:44.223125 | ubuntu-noble | 2026-06-02 09:43:44.223267 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 09:43:44.249737 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 09:43:44.249799 | ubuntu-noble | 2026-06-02 09:43:44.249906 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 09:43:44.322934 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 09:43:44.322996 | ubuntu-noble | 2026-06-02 09:43:44.323009 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 09:43:44.341509 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 09:43:44.341736 | debian-bookworm | 2026-06-02 09:43:44.341980 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 09:43:44.373353 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 09:43:44.373525 | debian-bookworm | 2026-06-02 09:43:44.373705 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 09:43:44.348525 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 09:43:44.348601 | ubuntu-noble | 2026-06-02 09:43:44.348614 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 09:43:48.479294 | debian-bookworm | The following additional packages will be installed: 2026-06-02 09:43:48.479585 | debian-bookworm | libauparse0 2026-06-02 09:43:48.479879 | debian-bookworm | Suggested packages: 2026-06-02 09:43:48.480132 | debian-bookworm | audispd-plugins 2026-06-02 09:43:48.480385 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 09:43:48.480632 | debian-bookworm | auditd libauparse0 2026-06-02 09:43:48.480923 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 09:43:48.482762 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780393336, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3669 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3669 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 09:43:48.483029 | debian-bookworm | 2026-06-02 09:43:48.483354 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 09:43:48.723454 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 09:43:48.723491 | ubuntu-noble | libauparse0t64 2026-06-02 09:43:48.723496 | ubuntu-noble | Suggested packages: 2026-06-02 09:43:48.723500 | ubuntu-noble | audispd-plugins 2026-06-02 09:43:48.723505 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 09:43:48.723509 | ubuntu-noble | auditd libauparse0t64 2026-06-02 09:43:48.723513 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 09:43:48.724281 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780393339, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (1733 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (1733 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 09:43:48.724484 | ubuntu-noble | 2026-06-02 09:43:48.724638 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 09:43:51.233641 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 09:43:51.233678 | debian-bookworm | audispd-plugins 2026-06-02 09:43:51.233712 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 09:43:51.233897 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780393336, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (948 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (948 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 09:43:51.234037 | debian-bookworm | 2026-06-02 09:43:51.234177 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 09:43:51.805923 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 09:43:51.806106 | ubuntu-noble | audispd-plugins 2026-06-02 09:43:51.806237 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 09:43:51.807976 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780393339, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (698 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (698 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 09:43:51.808012 | ubuntu-noble | 2026-06-02 09:43:51.808018 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 09:43:52.210246 | debian-bookworm | --- before 2026-06-02 09:43:52.210403 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-209385rohgju/tmp5mxbk539/auditd.conf.j2 2026-06-02 09:43:52.210424 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 09:43:52.210433 | debian-bookworm | +# 2026-06-02 09:43:52.210464 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 09:43:52.210573 | debian-bookworm | +# 2026-06-02 09:43:52.210658 | debian-bookworm | + 2026-06-02 09:43:52.210754 | debian-bookworm | +local_events = yes 2026-06-02 09:43:52.210851 | debian-bookworm | +write_logs = yes 2026-06-02 09:43:52.210947 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 09:43:52.211083 | debian-bookworm | +log_group = adm 2026-06-02 09:43:52.211170 | debian-bookworm | +log_format = RAW 2026-06-02 09:43:52.211266 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 09:43:52.211360 | debian-bookworm | +freq = 50 2026-06-02 09:43:52.211452 | debian-bookworm | +max_log_file = 8 2026-06-02 09:43:52.211546 | debian-bookworm | +num_logs = 5 2026-06-02 09:43:52.211640 | debian-bookworm | +priority_boost = 4 2026-06-02 09:43:52.211732 | debian-bookworm | +disp_qos = lossy 2026-06-02 09:43:52.212016 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 09:43:52.212125 | debian-bookworm | +name_format = NONE 2026-06-02 09:43:52.212225 | debian-bookworm | +##name = mydomain 2026-06-02 09:43:52.212325 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 09:43:52.212421 | debian-bookworm | +space_left = 12361 2026-06-02 09:43:52.212508 | debian-bookworm | +space_left_action = email 2026-06-02 09:43:52.212602 | debian-bookworm | +verify_email = yes 2026-06-02 09:43:52.212695 | debian-bookworm | +action_mail_acct = root 2026-06-02 09:43:52.212791 | debian-bookworm | +admin_space_left = 50 2026-06-02 09:43:52.212889 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 09:43:52.212996 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 09:43:52.213091 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 09:43:52.213185 | debian-bookworm | +use_libwrap = yes 2026-06-02 09:43:52.213280 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 09:43:52.213375 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 09:43:52.213468 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 09:43:52.213565 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 09:43:52.213706 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 09:43:52.213828 | debian-bookworm | +enable_krb5 = no 2026-06-02 09:43:52.213916 | debian-bookworm | +krb5_principal = auditd 2026-06-02 09:43:52.214023 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 09:43:52.214118 | debian-bookworm | +distribute_network = no 2026-06-02 09:43:52.214209 | debian-bookworm | 2026-06-02 09:43:52.214332 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780393431.2504067-2463-97192690745661/.source.conf", "state": "file", "uid": 0} 2026-06-02 09:43:52.214428 | debian-bookworm | 2026-06-02 09:43:52.214537 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 09:43:52.590243 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 09:43:52.590435 | debian-bookworm | 2026-06-02 09:43:52.590551 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 09:43:53.274753 | debian-bookworm | --- before 2026-06-02 09:43:53.275040 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-209385rohgju/tmpaiorybes/20-neo23x0.rules.j2 2026-06-02 09:43:53.275365 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 09:43:53.275598 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 09:43:53.275825 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 09:43:53.276148 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 09:43:53.276338 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 09:43:53.276500 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 09:43:53.276632 | debian-bookworm | +# 2026-06-02 09:43:53.276833 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 09:43:53.277066 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 09:43:53.277171 | debian-bookworm | +# 2026-06-02 09:43:53.277346 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 09:43:53.277588 | debian-bookworm | +# 2026-06-02 09:43:53.277745 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 09:43:53.277898 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 09:43:53.278094 | debian-bookworm | +# 2026-06-02 09:43:53.278229 | debian-bookworm | +# Based on rules published here: 2026-06-02 09:43:53.278549 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 09:43:53.278807 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 09:43:53.279119 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 09:43:53.279348 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 09:43:53.279545 | debian-bookworm | +# Linux audit repo 2026-06-02 09:43:53.279753 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 09:43:53.279953 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 09:43:53.280190 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 09:43:53.280338 | debian-bookworm | +# 2026-06-02 09:43:53.280474 | debian-bookworm | +# Further rules 2026-06-02 09:43:53.280673 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 09:43:53.280882 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 09:43:53.281138 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 09:43:53.286361 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 09:43:53.286382 | debian-bookworm | + 2026-06-02 09:43:53.286387 | debian-bookworm | +# Remove any existing rules 2026-06-02 09:43:53.286391 | debian-bookworm | +-D 2026-06-02 09:43:53.286395 | debian-bookworm | + 2026-06-02 09:43:53.286399 | debian-bookworm | +# Buffer Size 2026-06-02 09:43:53.286403 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 09:43:53.286407 | debian-bookworm | +-b 8192 2026-06-02 09:43:53.286411 | debian-bookworm | + 2026-06-02 09:43:53.286415 | debian-bookworm | +# Failure Mode 2026-06-02 09:43:53.286419 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 09:43:53.286423 | debian-bookworm | +-f 1 2026-06-02 09:43:53.286426 | debian-bookworm | + 2026-06-02 09:43:53.286430 | debian-bookworm | +# Ignore errors 2026-06-02 09:43:53.286434 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 09:43:53.286438 | debian-bookworm | +-i 2026-06-02 09:43:53.286441 | debian-bookworm | + 2026-06-02 09:43:53.286445 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 09:43:53.286449 | debian-bookworm | + 2026-06-02 09:43:53.286453 | debian-bookworm | +## Audit the audit logs 2026-06-02 09:43:53.286457 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 09:43:53.286461 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 09:43:53.286464 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 09:43:53.286468 | debian-bookworm | + 2026-06-02 09:43:53.286472 | debian-bookworm | +## Auditd configuration 2026-06-02 09:43:53.286476 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 09:43:53.286480 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 09:43:53.286483 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 09:43:53.286487 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 09:43:53.286491 | debian-bookworm | + 2026-06-02 09:43:53.286494 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 09:43:53.286498 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 09:43:53.286502 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 09:43:53.286505 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 09:43:53.286509 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 09:43:53.286513 | debian-bookworm | + 2026-06-02 09:43:53.286516 | debian-bookworm | +## Access to all audit trails 2026-06-02 09:43:53.286520 | debian-bookworm | + 2026-06-02 09:43:53.286524 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 09:43:53.286528 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 09:43:53.286534 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 09:43:53.286592 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 09:43:53.286764 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 09:43:53.286900 | debian-bookworm | + 2026-06-02 09:43:53.287069 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 09:43:53.287195 | debian-bookworm | + 2026-06-02 09:43:53.287341 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 09:43:53.287463 | debian-bookworm | + 2026-06-02 09:43:53.287584 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 09:43:53.287728 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 09:43:53.287843 | debian-bookworm | + 2026-06-02 09:43:53.287960 | debian-bookworm | +## Ignore current working directory records 2026-06-02 09:43:53.288087 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 09:43:53.288198 | debian-bookworm | + 2026-06-02 09:43:53.288316 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 09:43:53.288431 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 09:43:53.288547 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 09:43:53.288658 | debian-bookworm | + 2026-06-02 09:43:53.288796 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 09:43:53.288923 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 09:43:53.289058 | debian-bookworm | + 2026-06-02 09:43:53.289180 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 09:43:53.289323 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 09:43:53.289447 | debian-bookworm | + 2026-06-02 09:43:53.289563 | debian-bookworm | +## Open VM Tools 2026-06-02 09:43:53.289683 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 09:43:53.289813 | debian-bookworm | + 2026-06-02 09:43:53.289960 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 09:43:53.290131 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 09:43:53.290252 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 09:43:53.290400 | debian-bookworm | + 2026-06-02 09:43:53.290527 | debian-bookworm | +## FileBeat 2026-06-02 09:43:53.290693 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 09:43:53.290848 | debian-bookworm | + 2026-06-02 09:43:53.291007 | debian-bookworm | +## More information on how to filter events 2026-06-02 09:43:53.291183 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 09:43:53.291330 | debian-bookworm | + 2026-06-02 09:43:53.291438 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 09:43:53.291542 | debian-bookworm | + 2026-06-02 09:43:53.291649 | debian-bookworm | +## Kernel parameters 2026-06-02 09:43:53.291749 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 09:43:53.291852 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 09:43:53.291949 | debian-bookworm | + 2026-06-02 09:43:53.292083 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 09:43:53.292196 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 09:43:53.292300 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 09:43:53.292405 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 09:43:53.292509 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 09:43:53.292598 | debian-bookworm | + 2026-06-02 09:43:53.292692 | debian-bookworm | +## Modprobe configuration 2026-06-02 09:43:53.292788 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 09:43:53.292895 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 09:43:53.292987 | debian-bookworm | + 2026-06-02 09:43:53.293096 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 09:43:53.293193 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 09:43:53.293286 | debian-bookworm | + 2026-06-02 09:43:53.293403 | debian-bookworm | +## Special files 2026-06-02 09:43:53.293523 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 09:43:53.293629 | debian-bookworm | + 2026-06-02 09:43:53.293711 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 09:43:53.293810 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 09:43:53.293901 | debian-bookworm | + 2026-06-02 09:43:53.293996 | debian-bookworm | +### NFS mount 2026-06-02 09:43:53.294110 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.294208 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.294299 | debian-bookworm | + 2026-06-02 09:43:53.294413 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 09:43:53.294511 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 09:43:53.294602 | debian-bookworm | + 2026-06-02 09:43:53.294705 | debian-bookworm | +## Time 2026-06-02 09:43:53.294790 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 09:43:53.294883 | debian-bookworm | +### Local time zone 2026-06-02 09:43:53.294982 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 09:43:53.295103 | debian-bookworm | + 2026-06-02 09:43:53.295196 | debian-bookworm | +## Stunnel 2026-06-02 09:43:53.295291 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 09:43:53.295383 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 09:43:53.295474 | debian-bookworm | + 2026-06-02 09:43:53.295576 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 09:43:53.295664 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 09:43:53.295783 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 09:43:53.295853 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 09:43:53.295948 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 09:43:53.296070 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 09:43:53.296189 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 09:43:53.296325 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 09:43:53.296455 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 09:43:53.296587 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 09:43:53.296722 | debian-bookworm | + 2026-06-02 09:43:53.296863 | debian-bookworm | +## User, group, password databases 2026-06-02 09:43:53.297000 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 09:43:53.297169 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 09:43:53.297310 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 09:43:53.297447 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 09:43:53.297587 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 09:43:53.297720 | debian-bookworm | + 2026-06-02 09:43:53.297859 | debian-bookworm | +## Sudoers file changes 2026-06-02 09:43:53.297982 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 09:43:53.298116 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 09:43:53.298236 | debian-bookworm | + 2026-06-02 09:43:53.298393 | debian-bookworm | +## Passwd 2026-06-02 09:43:53.298523 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 09:43:53.298644 | debian-bookworm | + 2026-06-02 09:43:53.298772 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 09:43:53.298899 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 09:43:53.299038 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 09:43:53.299169 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 09:43:53.299296 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 09:43:53.299422 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 09:43:53.299550 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 09:43:53.299675 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 09:43:53.021574 | ubuntu-noble | --- before 2026-06-02 09:43:53.024436 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1929z31jiq8w/tmpcs1g757t/auditd.conf.j2 2026-06-02 09:43:53.024463 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 09:43:53.024469 | ubuntu-noble | +# 2026-06-02 09:43:53.024475 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 09:43:53.024480 | ubuntu-noble | +# 2026-06-02 09:43:53.024484 | ubuntu-noble | + 2026-06-02 09:43:53.024489 | ubuntu-noble | +local_events = yes 2026-06-02 09:43:53.024494 | ubuntu-noble | +write_logs = yes 2026-06-02 09:43:53.024499 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 09:43:53.024504 | ubuntu-noble | +log_group = adm 2026-06-02 09:43:53.025355 | ubuntu-noble | +log_format = RAW 2026-06-02 09:43:53.025561 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 09:43:53.025765 | ubuntu-noble | +freq = 50 2026-06-02 09:43:53.025906 | ubuntu-noble | +max_log_file = 8 2026-06-02 09:43:53.026041 | ubuntu-noble | +num_logs = 5 2026-06-02 09:43:53.026176 | ubuntu-noble | +priority_boost = 4 2026-06-02 09:43:53.026326 | ubuntu-noble | +disp_qos = lossy 2026-06-02 09:43:53.026525 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 09:43:53.026686 | ubuntu-noble | +name_format = NONE 2026-06-02 09:43:53.026823 | ubuntu-noble | +##name = mydomain 2026-06-02 09:43:53.026959 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 09:43:53.027094 | ubuntu-noble | +space_left = 12361 2026-06-02 09:43:53.027229 | ubuntu-noble | +space_left_action = email 2026-06-02 09:43:53.027364 | ubuntu-noble | +verify_email = yes 2026-06-02 09:43:53.027582 | ubuntu-noble | +action_mail_acct = root 2026-06-02 09:43:53.027750 | ubuntu-noble | +admin_space_left = 50 2026-06-02 09:43:53.027893 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 09:43:53.028035 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 09:43:53.028174 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 09:43:53.028310 | ubuntu-noble | +use_libwrap = yes 2026-06-02 09:43:53.028466 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 09:43:53.028685 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 09:43:53.028826 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 09:43:53.028967 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 09:43:53.029091 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 09:43:53.029211 | ubuntu-noble | +enable_krb5 = no 2026-06-02 09:43:53.029332 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 09:43:53.029482 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 09:43:53.029675 | ubuntu-noble | +distribute_network = no 2026-06-02 09:43:53.029799 | ubuntu-noble | 2026-06-02 09:43:53.029958 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780393431.826883-2329-280029341285177/.source.conf", "state": "file", "uid": 0} 2026-06-02 09:43:53.030300 | ubuntu-noble | 2026-06-02 09:43:53.030483 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 09:43:53.299842 | debian-bookworm | + 2026-06-02 09:43:53.299921 | debian-bookworm | +## Login configuration and information 2026-06-02 09:43:53.300089 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 09:43:53.300211 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 09:43:53.300339 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 09:43:53.300464 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 09:43:53.300587 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 09:43:53.300711 | debian-bookworm | + 2026-06-02 09:43:53.300842 | debian-bookworm | +## Network Environment 2026-06-02 09:43:53.300972 | debian-bookworm | +### Changes to hostname 2026-06-02 09:43:53.301179 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 09:43:53.301316 | debian-bookworm | + 2026-06-02 09:43:53.301454 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 09:43:53.301590 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 09:43:53.301725 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 09:43:53.301867 | debian-bookworm | + 2026-06-02 09:43:53.302001 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 09:43:53.302156 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 09:43:53.302279 | debian-bookworm | + 2026-06-02 09:43:53.302431 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 09:43:53.302565 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 09:43:53.302691 | debian-bookworm | + 2026-06-02 09:43:53.302820 | debian-bookworm | +### Changes to other files 2026-06-02 09:43:53.302954 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 09:43:53.303120 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 09:43:53.303256 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 09:43:53.303386 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 09:43:53.303520 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 09:43:53.303655 | debian-bookworm | + 2026-06-02 09:43:53.303786 | debian-bookworm | +### Changes to issue 2026-06-02 09:43:53.303919 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 09:43:53.304064 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 09:43:53.304190 | debian-bookworm | + 2026-06-02 09:43:53.304324 | debian-bookworm | +## System startup scripts 2026-06-02 09:43:53.304454 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 09:43:53.304588 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 09:43:53.304721 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 09:43:53.304849 | debian-bookworm | + 2026-06-02 09:43:53.304983 | debian-bookworm | +## Library search paths 2026-06-02 09:43:53.305161 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 09:43:53.305438 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 09:43:53.305450 | debian-bookworm | + 2026-06-02 09:43:53.305548 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 09:43:53.305680 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 09:43:53.305806 | debian-bookworm | + 2026-06-02 09:43:53.305936 | debian-bookworm | +## Pam configuration 2026-06-02 09:43:53.306080 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 09:43:53.306226 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 09:43:53.306403 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 09:43:53.306561 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 09:43:53.306681 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 09:43:53.306818 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 09:43:53.306951 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 09:43:53.307122 | debian-bookworm | + 2026-06-02 09:43:53.307267 | debian-bookworm | +## Mail configuration 2026-06-02 09:43:53.307412 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 09:43:53.307554 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 09:43:53.307697 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 09:43:53.307837 | debian-bookworm | + 2026-06-02 09:43:53.307982 | debian-bookworm | +## SSH configuration 2026-06-02 09:43:53.308144 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 09:43:53.308289 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 09:43:53.308424 | debian-bookworm | + 2026-06-02 09:43:53.308567 | debian-bookworm | +## root ssh key tampering 2026-06-02 09:43:53.308703 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 09:43:53.308821 | debian-bookworm | + 2026-06-02 09:43:53.308920 | debian-bookworm | +# Systemd 2026-06-02 09:43:53.309017 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 09:43:53.309127 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 09:43:53.309254 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 09:43:53.309397 | debian-bookworm | + 2026-06-02 09:43:53.309542 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 09:43:53.309686 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:53.309831 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:53.309976 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 09:43:53.310160 | debian-bookworm | + 2026-06-02 09:43:53.310299 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 09:43:53.310471 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 09:43:53.310614 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:53.310754 | debian-bookworm | + 2026-06-02 09:43:53.310901 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 09:43:53.311058 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 09:43:53.311199 | debian-bookworm | + 2026-06-02 09:43:53.311344 | debian-bookworm | +## Critical elements access failures 2026-06-02 09:43:53.311950 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.311968 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.311972 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.311985 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.312110 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.312253 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.312402 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.312551 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 09:43:53.312695 | debian-bookworm | + 2026-06-02 09:43:53.312833 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 09:43:53.312994 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 09:43:53.313145 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 09:43:53.313291 | debian-bookworm | + 2026-06-02 09:43:53.313452 | debian-bookworm | +## Power state 2026-06-02 09:43:53.313587 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 09:43:53.313733 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 09:43:53.313876 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 09:43:53.314018 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 09:43:53.314169 | debian-bookworm | + 2026-06-02 09:43:53.314324 | debian-bookworm | +## Session initiation information 2026-06-02 09:43:53.314488 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 09:43:53.314632 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 09:43:53.314762 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 09:43:53.314857 | debian-bookworm | + 2026-06-02 09:43:53.314954 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 09:43:53.315073 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315172 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315268 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315362 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315462 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315554 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315649 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315745 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315841 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.315935 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.316041 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.316145 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.316235 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:53.316391 | debian-bookworm | + 2026-06-02 09:43:53.316489 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 09:43:53.316581 | debian-bookworm | + 2026-06-02 09:43:53.316673 | debian-bookworm | +## Reconnaissance 2026-06-02 09:43:53.316769 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 09:43:53.316864 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 09:43:53.316960 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 09:43:53.317062 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 09:43:53.317156 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 09:43:53.317252 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 09:43:53.317371 | debian-bookworm | + 2026-06-02 09:43:53.317467 | debian-bookworm | +## Suspicious activity 2026-06-02 09:43:53.317564 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 09:43:53.317659 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 09:43:53.317752 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 09:43:53.317844 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 09:43:53.317938 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 09:43:53.318053 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 09:43:53.318149 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 09:43:53.318247 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 09:43:53.318367 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 09:43:53.318464 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 09:43:53.318558 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 09:43:53.318651 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 09:43:53.318744 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 09:43:53.318837 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 09:43:53.318930 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 09:43:53.319024 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 09:43:53.319133 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 09:43:53.319223 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 09:43:53.319320 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 09:43:53.319410 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 09:43:53.319506 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 09:43:53.319600 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 09:43:53.319692 | debian-bookworm | + 2026-06-02 09:43:53.319784 | debian-bookworm | +## sssd 2026-06-02 09:43:53.319884 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.319981 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.320087 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.320186 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.320284 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.320374 | debian-bookworm | + 2026-06-02 09:43:53.320468 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 09:43:53.320557 | debian-bookworm | + 2026-06-02 09:43:53.320652 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 09:43:53.320747 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 09:43:53.320840 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 09:43:53.320935 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 09:43:53.321025 | debian-bookworm | + 2026-06-02 09:43:53.321142 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 09:43:53.321238 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 09:43:53.321351 | debian-bookworm | + 2026-06-02 09:43:53.321456 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 09:43:53.321587 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 09:43:53.321681 | debian-bookworm | + 2026-06-02 09:43:53.321778 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 09:43:53.321874 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 09:43:53.321967 | debian-bookworm | + 2026-06-02 09:43:53.322073 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 09:43:53.322170 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 09:43:53.322263 | debian-bookworm | + 2026-06-02 09:43:53.322404 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 09:43:53.322490 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 09:43:53.322600 | debian-bookworm | + 2026-06-02 09:43:53.322677 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 09:43:53.322776 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 09:43:53.322868 | debian-bookworm | + 2026-06-02 09:43:53.322963 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 09:43:53.323103 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 09:43:53.323196 | debian-bookworm | + 2026-06-02 09:43:53.323294 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 09:43:53.323389 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 09:43:53.323483 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 09:43:53.323577 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 09:43:53.323668 | debian-bookworm | + 2026-06-02 09:43:53.323759 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 09:43:53.323855 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 09:43:53.323945 | debian-bookworm | + 2026-06-02 09:43:53.324146 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 09:43:53.324221 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 09:43:53.324246 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 09:43:53.324357 | debian-bookworm | + 2026-06-02 09:43:53.324436 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 09:43:53.324530 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 09:43:53.324625 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 09:43:53.324815 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 09:43:53.324835 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 09:43:53.324928 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 09:43:53.325025 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 09:43:53.325134 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 09:43:53.325229 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 09:43:53.325338 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 09:43:53.325463 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 09:43:53.325586 | debian-bookworm | + 2026-06-02 09:43:53.325720 | debian-bookworm | +### kde4 2026-06-02 09:43:53.325897 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.325997 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:53.326110 | debian-bookworm | + 2026-06-02 09:43:53.326202 | debian-bookworm | +## dbus-send invocation 2026-06-02 09:43:53.326300 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 09:43:53.326418 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 09:43:53.326513 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 09:43:53.326604 | debian-bookworm | + 2026-06-02 09:43:53.326700 | debian-bookworm | +## pkexec invocation 2026-06-02 09:43:53.326796 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 09:43:53.326890 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 09:43:53.326994 | debian-bookworm | + 2026-06-02 09:43:53.327087 | debian-bookworm | +## Suspicious shells 2026-06-02 09:43:53.327182 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 09:43:53.327277 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 09:43:53.327370 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 09:43:53.327463 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 09:43:53.327557 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 09:43:53.327652 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 09:43:53.327777 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 09:43:53.327894 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 09:43:53.327989 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 09:43:53.328141 | debian-bookworm | + 2026-06-02 09:43:53.328192 | debian-bookworm | +# Web Server Actvity 2026-06-02 09:43:53.328290 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 09:43:53.328386 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 09:43:53.328476 | debian-bookworm | + 2026-06-02 09:43:53.328571 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 09:43:53.328661 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 09:43:53.328757 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 09:43:53.328853 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 09:43:53.328945 | debian-bookworm | + 2026-06-02 09:43:53.329071 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 09:43:53.329218 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 09:43:53.329324 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 09:43:53.329419 | debian-bookworm | + 2026-06-02 09:43:53.329512 | debian-bookworm | +## Shell/profile configurations 2026-06-02 09:43:53.329607 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 09:43:53.329700 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 09:43:53.329793 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 09:43:53.329887 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 09:43:53.329980 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 09:43:53.330143 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 09:43:53.330290 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 09:43:53.330374 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 09:43:53.330469 | debian-bookworm | + 2026-06-02 09:43:53.330562 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 09:43:53.330658 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 09:43:53.330839 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 09:43:53.330858 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 09:43:53.330939 | debian-bookworm | + 2026-06-02 09:43:53.331092 | debian-bookworm | +## Injection 2026-06-02 09:43:53.331149 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 09:43:53.331238 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 09:43:53.331415 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 09:43:53.331435 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 09:43:53.331521 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 09:43:53.331614 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 09:43:53.331706 | debian-bookworm | + 2026-06-02 09:43:53.331800 | debian-bookworm | +## Anonymous File Creation 2026-06-02 09:43:53.331909 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 09:43:53.332005 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 09:43:53.332137 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 09:43:53.332228 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 09:43:53.332318 | debian-bookworm | + 2026-06-02 09:43:53.332410 | debian-bookworm | +## Privilege Abuse 2026-06-02 09:43:53.332507 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 09:43:53.332607 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 09:43:53.332699 | debian-bookworm | + 2026-06-02 09:43:53.332794 | debian-bookworm | +# Socket Creations 2026-06-02 09:43:53.332890 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 09:43:53.332982 | debian-bookworm | + 2026-06-02 09:43:53.333090 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 09:43:53.333185 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 09:43:53.333278 | debian-bookworm | + 2026-06-02 09:43:53.333388 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 09:43:53.333485 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 09:43:53.333577 | debian-bookworm | + 2026-06-02 09:43:53.333670 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 09:43:53.333759 | debian-bookworm | + 2026-06-02 09:43:53.333854 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 09:43:53.333949 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 09:43:53.334081 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 09:43:53.334147 | debian-bookworm | + 2026-06-02 09:43:53.334240 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 09:43:53.334344 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 09:43:53.334446 | debian-bookworm | + 2026-06-02 09:43:53.334542 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 09:43:53.334638 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 09:43:53.334729 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 09:43:53.334826 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 09:43:53.334921 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 09:43:53.335011 | debian-bookworm | + 2026-06-02 09:43:53.335116 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 09:43:53.335210 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 09:43:53.335306 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 09:43:53.335401 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 09:43:53.335495 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 09:43:53.335588 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 09:43:53.335696 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 09:43:53.335778 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 09:43:53.335869 | debian-bookworm | + 2026-06-02 09:43:53.335964 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 09:43:53.336071 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336167 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336263 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336359 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336453 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336546 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 09:43:53.336635 | debian-bookworm | + 2026-06-02 09:43:53.336727 | debian-bookworm | +# npm 2026-06-02 09:43:53.336821 | debian-bookworm | +## T1072 third party software 2026-06-02 09:43:53.336914 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 09:43:53.337009 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 09:43:53.337140 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 09:43:53.337220 | debian-bookworm | + 2026-06-02 09:43:53.337319 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 09:43:53.337416 | debian-bookworm | +## T1072 third party software 2026-06-02 09:43:53.337510 | debian-bookworm | +## https://www.cpan.org 2026-06-02 09:43:53.337606 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 09:43:53.337699 | debian-bookworm | + 2026-06-02 09:43:53.337796 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 09:43:53.337891 | debian-bookworm | +## T1072 third party software 2026-06-02 09:43:53.337984 | debian-bookworm | +## https://rubygems.org 2026-06-02 09:43:53.338086 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 09:43:53.338177 | debian-bookworm | + 2026-06-02 09:43:53.338271 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 09:43:53.338380 | debian-bookworm | +## T1072 third party software 2026-06-02 09:43:53.338476 | debian-bookworm | +## https://luarocks.org 2026-06-02 09:43:53.338580 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 09:43:53.338670 | debian-bookworm | + 2026-06-02 09:43:53.338760 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 09:43:53.338857 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 09:43:53.338946 | debian-bookworm | +## T1072 third party software 2026-06-02 09:43:53.339073 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 09:43:53.339164 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 09:43:53.339255 | debian-bookworm | + 2026-06-02 09:43:53.339349 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 09:43:53.339439 | debian-bookworm | + 2026-06-02 09:43:53.339530 | debian-bookworm | +## GDS specific secrets 2026-06-02 09:43:53.339625 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 09:43:53.339717 | debian-bookworm | + 2026-06-02 09:43:53.339810 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 09:43:53.339910 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 09:43:53.340008 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 09:43:53.340105 | debian-bookworm | + 2026-06-02 09:43:53.340199 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 09:43:53.340291 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 09:43:53.340388 | debian-bookworm | + 2026-06-02 09:43:53.340501 | debian-bookworm | +## Salt 2026-06-02 09:43:53.340672 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 09:43:53.340689 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 09:43:53.340772 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 09:43:53.340872 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 09:43:53.340957 | debian-bookworm | + 2026-06-02 09:43:53.341092 | debian-bookworm | +## Otter 2026-06-02 09:43:53.341169 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 09:43:53.341260 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 09:43:53.341352 | debian-bookworm | + 2026-06-02 09:43:53.341447 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 09:43:53.341541 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 09:43:53.341635 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 09:43:53.341729 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 09:43:53.341823 | debian-bookworm | +### macOS 2026-06-02 09:43:53.341917 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 09:43:53.342011 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 09:43:53.342119 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 09:43:53.342212 | debian-bookworm | + 2026-06-02 09:43:53.342307 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 09:43:53.342430 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 09:43:53.342524 | debian-bookworm | +### macOS 2026-06-02 09:43:53.342620 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 09:43:53.342713 | debian-bookworm | + 2026-06-02 09:43:53.342810 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 09:43:53.342905 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 09:43:53.342996 | debian-bookworm | +### macOS 2026-06-02 09:43:53.343126 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 09:43:53.343229 | debian-bookworm | + 2026-06-02 09:43:53.343298 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 09:43:53.343388 | debian-bookworm | + 2026-06-02 09:43:53.343482 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 09:43:53.343575 | debian-bookworm | +### macOS 2026-06-02 09:43:53.343669 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 09:43:53.343760 | debian-bookworm | + 2026-06-02 09:43:53.343853 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 09:43:53.343945 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 09:43:53.344047 | debian-bookworm | +### macOS 2026-06-02 09:43:53.344142 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 09:43:53.344232 | debian-bookworm | + 2026-06-02 09:43:53.344326 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 09:43:53.344418 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 09:43:53.344512 | debian-bookworm | +### macOS 2026-06-02 09:43:53.344607 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 09:43:53.344700 | debian-bookworm | + 2026-06-02 09:43:53.344796 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 09:43:53.344890 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 09:43:53.344984 | debian-bookworm | +### macOS 2026-06-02 09:43:53.345086 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 09:43:53.345182 | debian-bookworm | + 2026-06-02 09:43:53.345280 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 09:43:53.345375 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 09:43:53.345468 | debian-bookworm | +### macOS 2026-06-02 09:43:53.345563 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 09:43:53.345653 | debian-bookworm | + 2026-06-02 09:43:53.345747 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 09:43:53.345845 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 09:43:53.345937 | debian-bookworm | +### macOS 2026-06-02 09:43:53.346041 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 09:43:53.346130 | debian-bookworm | + 2026-06-02 09:43:53.346225 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 09:43:53.346340 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 09:43:53.346429 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 09:43:53.346528 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 09:43:53.346623 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 09:43:53.346715 | debian-bookworm | +### macOS 2026-06-02 09:43:53.346808 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 09:43:53.346899 | debian-bookworm | + 2026-06-02 09:43:53.346992 | debian-bookworm | +## Docker 2026-06-02 09:43:53.347108 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 09:43:53.347202 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 09:43:53.347297 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 09:43:53.347391 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 09:43:53.347512 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 09:43:53.347578 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 09:43:53.347672 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 09:43:53.347782 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 09:43:53.347882 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 09:43:53.347973 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 09:43:53.348115 | debian-bookworm | + 2026-06-02 09:43:53.348174 | debian-bookworm | +## Virtualization stuff 2026-06-02 09:43:53.348270 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 09:43:53.348451 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 09:43:53.348463 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 09:43:53.348543 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 09:43:53.348637 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 09:43:53.348733 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 09:43:53.348823 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 09:43:53.348916 | debian-bookworm | + 2026-06-02 09:43:53.349087 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 09:43:53.349186 | debian-bookworm | + 2026-06-02 09:43:53.349283 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 09:43:53.349382 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 09:43:53.349477 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 09:43:53.349571 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 09:43:53.349686 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 09:43:53.349811 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 09:43:53.354418 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 09:43:53.354447 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 09:43:53.354452 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 09:43:53.354456 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 09:43:53.354460 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 09:43:53.354464 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 09:43:53.354468 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 09:43:53.354472 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 09:43:53.354475 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 09:43:53.354479 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 09:43:53.354483 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 09:43:53.354486 | debian-bookworm | + 2026-06-02 09:43:53.354490 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 09:43:53.354494 | debian-bookworm | + 2026-06-02 09:43:53.354498 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 09:43:53.354502 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 09:43:53.354505 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 09:43:53.354509 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 09:43:53.354513 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 09:43:53.354517 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 09:43:53.354520 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 09:43:53.354524 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 09:43:53.354528 | debian-bookworm | + 2026-06-02 09:43:53.354531 | debian-bookworm | +### qemu on macOS 2026-06-02 09:43:53.354536 | debian-bookworm | + 2026-06-02 09:43:53.354539 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 09:43:53.354543 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 09:43:53.354547 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 09:43:53.354551 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 09:43:53.354556 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 09:43:53.354560 | debian-bookworm | + 2026-06-02 09:43:53.354564 | debian-bookworm | +## Kubelet 2026-06-02 09:43:53.354568 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 09:43:53.354571 | debian-bookworm | + 2026-06-02 09:43:53.354575 | debian-bookworm | +# ipc system call 2026-06-02 09:43:53.354579 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 09:43:53.354583 | debian-bookworm | + 2026-06-02 09:43:53.354592 | debian-bookworm | +## msgctl 2026-06-02 09:43:53.354596 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 09:43:53.354600 | debian-bookworm | +## msgget 2026-06-02 09:43:53.354604 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 09:43:53.354607 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:53.354611 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 09:43:53.354615 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 09:43:53.354619 | debian-bookworm | + 2026-06-02 09:43:53.354622 | debian-bookworm | +## semctl 2026-06-02 09:43:53.354626 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 09:43:53.354630 | debian-bookworm | +## semget 2026-06-02 09:43:53.354634 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 09:43:53.354637 | debian-bookworm | +## semop 2026-06-02 09:43:53.354645 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 09:43:53.354649 | debian-bookworm | +## semtimedop 2026-06-02 09:43:53.354652 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 09:43:53.354737 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:53.354829 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 09:43:53.354924 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 09:43:53.355019 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 09:43:53.355124 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 09:43:53.355214 | debian-bookworm | + 2026-06-02 09:43:53.355306 | debian-bookworm | +## shmctl 2026-06-02 09:43:53.355401 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 09:43:53.355495 | debian-bookworm | +## shmget 2026-06-02 09:43:53.355589 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 09:43:53.355683 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:53.355778 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 09:43:53.355873 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 09:43:53.355969 | debian-bookworm | + 2026-06-02 09:43:53.356072 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 09:43:53.356163 | debian-bookworm | + 2026-06-02 09:43:53.356260 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 09:43:53.356350 | debian-bookworm | + 2026-06-02 09:43:53.356444 | debian-bookworm | +## Common Shells 2026-06-02 09:43:53.356554 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 09:43:53.356630 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 09:43:53.356722 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 09:43:53.356816 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 09:43:53.356908 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 09:43:53.356999 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 09:43:53.357097 | debian-bookworm | + 2026-06-02 09:43:53.357192 | debian-bookworm | +## Root command executions 2026-06-02 09:43:53.357288 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 09:43:53.357377 | debian-bookworm | + 2026-06-02 09:43:53.357474 | debian-bookworm | +## File Deletion Events by User 2026-06-02 09:43:53.357572 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 09:43:53.357662 | debian-bookworm | + 2026-06-02 09:43:53.357756 | debian-bookworm | +## File Access 2026-06-02 09:43:53.357852 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 09:43:53.357952 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 09:43:53.358070 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 09:43:53.358164 | debian-bookworm | + 2026-06-02 09:43:53.358260 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 09:43:53.358398 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 09:43:53.358469 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 09:43:53.358560 | debian-bookworm | + 2026-06-02 09:43:53.358655 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 09:43:53.358753 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 09:43:53.358853 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 09:43:53.358945 | debian-bookworm | + 2026-06-02 09:43:53.359064 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 09:43:53.359140 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 09:43:53.359235 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 09:43:53.359331 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 09:43:53.359424 | debian-bookworm | +### bit API. 2026-06-02 09:43:53.359518 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 09:43:53.359607 | debian-bookworm | + 2026-06-02 09:43:53.359703 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 09:43:53.359793 | debian-bookworm | + 2026-06-02 09:43:53.359884 | debian-bookworm | +##-e 2 2026-06-02 09:43:53.359972 | debian-bookworm | 2026-06-02 09:43:53.360207 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780393432.606104-2541-233022070979462/.source.rules", "state": "file", "uid": 0} 2026-06-02 09:43:53.360295 | debian-bookworm | 2026-06-02 09:43:53.360392 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 09:43:53.448124 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 09:43:53.448285 | ubuntu-noble | 2026-06-02 09:43:53.448509 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 09:43:54.003219 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ActiveEnterTimestampMonotonic": "406142624", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:47 UTC", "AssertTimestampMonotonic": "406079027", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "47289000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ConditionTimestampMonotonic": "406078989", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2313", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ExecMainStartTimestampMonotonic": "406118579", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2312 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2312 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2316 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2316 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:47 UTC", "InactiveExitTimestampMonotonic": "406097064", "InvocationID": "9bee0bb42bce49ce932ffc70907c4c15", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2313", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 09:43:47 UTC", "StateChangeTimestampMonotonic": "406142624", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:54.004558 | debian-bookworm | 2026-06-02 09:43:54.004588 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 09:43:54.306385 | ubuntu-noble | --- before 2026-06-02 09:43:54.309449 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1929z31jiq8w/tmponb2le1y/20-neo23x0.rules.j2 2026-06-02 09:43:54.309480 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 09:43:54.309488 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 09:43:54.309495 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 09:43:54.309501 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 09:43:54.309506 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 09:43:54.309512 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 09:43:54.309518 | ubuntu-noble | +# 2026-06-02 09:43:54.309525 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 09:43:54.309530 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 09:43:54.309675 | ubuntu-noble | +# 2026-06-02 09:43:54.309875 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 09:43:54.310061 | ubuntu-noble | +# 2026-06-02 09:43:54.310247 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 09:43:54.310458 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 09:43:54.310697 | ubuntu-noble | +# 2026-06-02 09:43:54.310891 | ubuntu-noble | +# Based on rules published here: 2026-06-02 09:43:54.311080 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 09:43:54.311558 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 09:43:54.311881 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 09:43:54.312179 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 09:43:54.312465 | ubuntu-noble | +# Linux audit repo 2026-06-02 09:43:54.312780 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 09:43:54.313047 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 09:43:54.313326 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 09:43:54.313534 | ubuntu-noble | +# 2026-06-02 09:43:54.313742 | ubuntu-noble | +# Further rules 2026-06-02 09:43:54.314011 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 09:43:54.314308 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 09:43:54.314641 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 09:43:54.314965 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 09:43:54.315158 | ubuntu-noble | + 2026-06-02 09:43:54.315348 | ubuntu-noble | +# Remove any existing rules 2026-06-02 09:43:54.315558 | ubuntu-noble | +-D 2026-06-02 09:43:54.315770 | ubuntu-noble | + 2026-06-02 09:43:54.315956 | ubuntu-noble | +# Buffer Size 2026-06-02 09:43:54.316149 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 09:43:54.316334 | ubuntu-noble | +-b 8192 2026-06-02 09:43:54.316538 | ubuntu-noble | + 2026-06-02 09:43:54.316779 | ubuntu-noble | +# Failure Mode 2026-06-02 09:43:54.316982 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 09:43:54.317150 | ubuntu-noble | +-f 1 2026-06-02 09:43:54.317304 | ubuntu-noble | + 2026-06-02 09:43:54.317487 | ubuntu-noble | +# Ignore errors 2026-06-02 09:43:54.317678 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 09:43:54.317839 | ubuntu-noble | +-i 2026-06-02 09:43:54.317997 | ubuntu-noble | + 2026-06-02 09:43:54.318162 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 09:43:54.318318 | ubuntu-noble | + 2026-06-02 09:43:54.318500 | ubuntu-noble | +## Audit the audit logs 2026-06-02 09:43:54.318721 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 09:43:54.318889 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 09:43:54.319054 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 09:43:54.319198 | ubuntu-noble | + 2026-06-02 09:43:54.319346 | ubuntu-noble | +## Auditd configuration 2026-06-02 09:43:54.319512 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 09:43:54.319679 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 09:43:54.319830 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 09:43:54.319978 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 09:43:54.320118 | ubuntu-noble | + 2026-06-02 09:43:54.320267 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 09:43:54.320432 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 09:43:54.320661 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 09:43:54.320852 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 09:43:54.321002 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 09:43:54.321139 | ubuntu-noble | + 2026-06-02 09:43:54.321285 | ubuntu-noble | +## Access to all audit trails 2026-06-02 09:43:54.321453 | ubuntu-noble | + 2026-06-02 09:43:54.321628 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 09:43:54.321778 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 09:43:54.321940 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 09:43:54.322089 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 09:43:54.322239 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 09:43:54.322379 | ubuntu-noble | + 2026-06-02 09:43:54.322544 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 09:43:54.323426 | ubuntu-noble | + 2026-06-02 09:43:54.323441 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 09:43:54.323446 | ubuntu-noble | + 2026-06-02 09:43:54.323450 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 09:43:54.323455 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 09:43:54.323459 | ubuntu-noble | + 2026-06-02 09:43:54.323497 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 09:43:54.323657 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 09:43:54.323791 | ubuntu-noble | + 2026-06-02 09:43:54.323935 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 09:43:54.324075 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 09:43:54.324213 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 09:43:54.324345 | ubuntu-noble | + 2026-06-02 09:43:54.324612 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 09:43:54.324813 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 09:43:54.324953 | ubuntu-noble | + 2026-06-02 09:43:54.325090 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 09:43:54.325223 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 09:43:54.325342 | ubuntu-noble | + 2026-06-02 09:43:54.325485 | ubuntu-noble | +## Open VM Tools 2026-06-02 09:43:54.325637 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 09:43:54.325758 | ubuntu-noble | + 2026-06-02 09:43:54.325890 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 09:43:54.326017 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 09:43:54.326142 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 09:43:54.326259 | ubuntu-noble | + 2026-06-02 09:43:54.326381 | ubuntu-noble | +## FileBeat 2026-06-02 09:43:54.326525 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 09:43:54.326660 | ubuntu-noble | + 2026-06-02 09:43:54.326786 | ubuntu-noble | +## More information on how to filter events 2026-06-02 09:43:54.326914 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 09:43:54.327030 | ubuntu-noble | + 2026-06-02 09:43:54.327151 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 09:43:54.327267 | ubuntu-noble | + 2026-06-02 09:43:54.327390 | ubuntu-noble | +## Kernel parameters 2026-06-02 09:43:54.327531 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 09:43:54.327695 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 09:43:54.327816 | ubuntu-noble | + 2026-06-02 09:43:54.327943 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 09:43:54.328063 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 09:43:54.328182 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 09:43:54.328300 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 09:43:54.328434 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 09:43:54.330422 | ubuntu-noble | + 2026-06-02 09:43:54.330435 | ubuntu-noble | +## Modprobe configuration 2026-06-02 09:43:54.330439 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 09:43:54.330443 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 09:43:54.330446 | ubuntu-noble | + 2026-06-02 09:43:54.330450 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 09:43:54.330453 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 09:43:54.330468 | ubuntu-noble | + 2026-06-02 09:43:54.330472 | ubuntu-noble | +## Special files 2026-06-02 09:43:54.330476 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 09:43:54.330479 | ubuntu-noble | + 2026-06-02 09:43:54.330483 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 09:43:54.330486 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 09:43:54.330490 | ubuntu-noble | + 2026-06-02 09:43:54.330493 | ubuntu-noble | +### NFS mount 2026-06-02 09:43:54.330497 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.330508 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.330512 | ubuntu-noble | + 2026-06-02 09:43:54.330516 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 09:43:54.330519 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 09:43:54.330647 | ubuntu-noble | + 2026-06-02 09:43:54.330766 | ubuntu-noble | +## Time 2026-06-02 09:43:54.330887 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 09:43:54.331002 | ubuntu-noble | +### Local time zone 2026-06-02 09:43:54.331117 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 09:43:54.331227 | ubuntu-noble | + 2026-06-02 09:43:54.331339 | ubuntu-noble | +## Stunnel 2026-06-02 09:43:54.331470 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 09:43:54.331610 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 09:43:54.331723 | ubuntu-noble | + 2026-06-02 09:43:54.331839 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 09:43:54.331952 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 09:43:54.332065 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 09:43:54.332179 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 09:43:54.332296 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 09:43:54.332423 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 09:43:54.332543 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 09:43:54.332695 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 09:43:54.332813 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 09:43:54.332927 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 09:43:54.333036 | ubuntu-noble | + 2026-06-02 09:43:54.333153 | ubuntu-noble | +## User, group, password databases 2026-06-02 09:43:54.333267 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 09:43:54.333381 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 09:43:54.333509 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 09:43:54.333639 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 09:43:54.333755 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 09:43:54.333866 | ubuntu-noble | + 2026-06-02 09:43:54.333978 | ubuntu-noble | +## Sudoers file changes 2026-06-02 09:43:54.334090 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 09:43:54.334203 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 09:43:54.334313 | ubuntu-noble | + 2026-06-02 09:43:54.334438 | ubuntu-noble | +## Passwd 2026-06-02 09:43:54.334558 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 09:43:54.334680 | ubuntu-noble | + 2026-06-02 09:43:54.334795 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 09:43:54.334937 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 09:43:54.335058 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 09:43:54.335173 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 09:43:54.335288 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 09:43:54.335420 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 09:43:54.335541 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 09:43:54.335695 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 09:43:54.335806 | ubuntu-noble | + 2026-06-02 09:43:54.335922 | ubuntu-noble | +## Login configuration and information 2026-06-02 09:43:54.336036 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 09:43:54.336154 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 09:43:54.336270 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 09:43:54.336384 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 09:43:54.336514 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 09:43:54.336640 | ubuntu-noble | + 2026-06-02 09:43:54.336755 | ubuntu-noble | +## Network Environment 2026-06-02 09:43:54.336867 | ubuntu-noble | +### Changes to hostname 2026-06-02 09:43:54.336997 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 09:43:54.337104 | ubuntu-noble | + 2026-06-02 09:43:54.337218 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 09:43:54.337335 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 09:43:54.337470 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 09:43:54.337592 | ubuntu-noble | + 2026-06-02 09:43:54.337708 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 09:43:54.337825 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 09:43:54.337934 | ubuntu-noble | + 2026-06-02 09:43:54.338046 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 09:43:54.338165 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 09:43:54.338273 | ubuntu-noble | + 2026-06-02 09:43:54.338389 | ubuntu-noble | +### Changes to other files 2026-06-02 09:43:54.338527 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 09:43:54.338681 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 09:43:54.338800 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 09:43:54.364808 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.009569", "end": "2026-06-02 09:43:54.324580", "msg": "", "rc": 0, "start": "2026-06-02 09:43:54.315011", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 09:43:54.364862 | debian-bookworm | 2026-06-02 09:43:54.364873 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 09:43:54.659436 | debian-bookworm | --- before 2026-06-02 09:43:54.659470 | debian-bookworm | +++ after 2026-06-02 09:43:54.659475 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 09:43:54.659479 | debian-bookworm | { 2026-06-02 09:43:54.659483 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 09:43:54.659488 | debian-bookworm | - "state": "file" 2026-06-02 09:43:54.659492 | debian-bookworm | + "state": "absent" 2026-06-02 09:43:54.659496 | debian-bookworm | } 2026-06-02 09:43:54.659500 | debian-bookworm | 2026-06-02 09:43:54.659504 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 09:43:54.659509 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 09:43:54.659514 | debian-bookworm | 2026-06-02 09:43:54.659518 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 09:43:54.338974 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 09:43:54.339116 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 09:43:54.339229 | ubuntu-noble | + 2026-06-02 09:43:54.339343 | ubuntu-noble | +### Changes to issue 2026-06-02 09:43:54.339473 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 09:43:54.339608 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 09:43:54.339720 | ubuntu-noble | + 2026-06-02 09:43:54.339842 | ubuntu-noble | +## System startup scripts 2026-06-02 09:43:54.339954 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 09:43:54.340065 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 09:43:54.340176 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 09:43:54.340282 | ubuntu-noble | + 2026-06-02 09:43:54.340395 | ubuntu-noble | +## Library search paths 2026-06-02 09:43:54.340615 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 09:43:54.340738 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 09:43:54.340847 | ubuntu-noble | + 2026-06-02 09:43:54.340965 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 09:43:54.341081 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 09:43:54.341189 | ubuntu-noble | + 2026-06-02 09:43:54.341304 | ubuntu-noble | +## Pam configuration 2026-06-02 09:43:54.341433 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 09:43:54.341555 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 09:43:54.341706 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 09:43:54.341822 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 09:43:54.341937 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 09:43:54.342051 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 09:43:54.342165 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 09:43:54.342272 | ubuntu-noble | + 2026-06-02 09:43:54.342389 | ubuntu-noble | +## Mail configuration 2026-06-02 09:43:54.342518 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 09:43:54.342653 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 09:43:54.342765 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 09:43:54.342874 | ubuntu-noble | + 2026-06-02 09:43:54.342988 | ubuntu-noble | +## SSH configuration 2026-06-02 09:43:54.343102 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 09:43:54.343215 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 09:43:54.343325 | ubuntu-noble | + 2026-06-02 09:43:54.343613 | ubuntu-noble | +## root ssh key tampering 2026-06-02 09:43:54.344301 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 09:43:54.344310 | ubuntu-noble | + 2026-06-02 09:43:54.344314 | ubuntu-noble | +# Systemd 2026-06-02 09:43:54.344317 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 09:43:54.344321 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 09:43:54.344325 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 09:43:54.344329 | ubuntu-noble | + 2026-06-02 09:43:54.344561 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 09:43:54.344699 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:54.344820 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:54.344967 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 09:43:54.345090 | ubuntu-noble | + 2026-06-02 09:43:54.345208 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 09:43:54.345324 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 09:43:54.345460 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 09:43:54.345587 | ubuntu-noble | + 2026-06-02 09:43:54.345709 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 09:43:54.345825 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 09:43:54.345935 | ubuntu-noble | + 2026-06-02 09:43:54.346049 | ubuntu-noble | +## Critical elements access failures 2026-06-02 09:43:54.346168 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346285 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346423 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346548 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346702 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346822 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.346940 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.347062 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 09:43:54.348043 | ubuntu-noble | + 2026-06-02 09:43:54.349480 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 09:43:54.349511 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 09:43:54.349516 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 09:43:54.349520 | ubuntu-noble | + 2026-06-02 09:43:54.349524 | ubuntu-noble | +## Power state 2026-06-02 09:43:54.349528 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 09:43:54.349531 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 09:43:54.349535 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 09:43:54.349539 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 09:43:54.349543 | ubuntu-noble | + 2026-06-02 09:43:54.350758 | ubuntu-noble | +## Session initiation information 2026-06-02 09:43:54.350831 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 09:43:54.350949 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 09:43:54.351051 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 09:43:54.351143 | ubuntu-noble | + 2026-06-02 09:43:54.351257 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 09:43:54.351354 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.351494 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.351609 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.351713 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.351816 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.351918 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352022 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352134 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352228 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352330 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352719 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352818 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.352918 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 09:43:54.353013 | ubuntu-noble | + 2026-06-02 09:43:54.353112 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 09:43:54.353206 | ubuntu-noble | + 2026-06-02 09:43:54.353304 | ubuntu-noble | +## Reconnaissance 2026-06-02 09:43:54.353403 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 09:43:54.353541 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 09:43:54.353658 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 09:43:54.353755 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 09:43:54.353851 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 09:43:54.353951 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 09:43:54.354045 | ubuntu-noble | + 2026-06-02 09:43:54.354145 | ubuntu-noble | +## Suspicious activity 2026-06-02 09:43:54.354250 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 09:43:54.354342 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 09:43:54.355775 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 09:43:54.355799 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 09:43:54.355803 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 09:43:54.355807 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 09:43:54.355810 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 09:43:54.355814 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 09:43:54.355817 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 09:43:54.355820 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 09:43:54.355824 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 09:43:54.355827 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 09:43:54.355831 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 09:43:54.355837 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 09:43:54.355894 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 09:43:54.355998 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 09:43:54.356084 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 09:43:54.356184 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 09:43:54.356285 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 09:43:54.356383 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 09:43:54.356800 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 09:43:54.356861 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 09:43:54.356960 | ubuntu-noble | + 2026-06-02 09:43:54.357054 | ubuntu-noble | +## sssd 2026-06-02 09:43:54.357163 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.357270 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.357376 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.357515 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.357635 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.357728 | ubuntu-noble | + 2026-06-02 09:43:54.357829 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 09:43:54.357921 | ubuntu-noble | + 2026-06-02 09:43:54.358027 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 09:43:54.358123 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 09:43:54.358224 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 09:43:54.358324 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 09:43:54.359248 | ubuntu-noble | + 2026-06-02 09:43:54.359268 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 09:43:54.359273 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 09:43:54.359287 | ubuntu-noble | + 2026-06-02 09:43:54.359291 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 09:43:54.359295 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 09:43:54.359298 | ubuntu-noble | + 2026-06-02 09:43:54.359302 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 09:43:54.359308 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 09:43:54.359445 | ubuntu-noble | + 2026-06-02 09:43:54.359677 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 09:43:54.359789 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 09:43:54.359885 | ubuntu-noble | + 2026-06-02 09:43:54.359984 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 09:43:54.360084 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 09:43:54.360176 | ubuntu-noble | + 2026-06-02 09:43:54.360283 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 09:43:54.360383 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 09:43:54.360497 | ubuntu-noble | + 2026-06-02 09:43:54.360631 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 09:43:54.360731 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 09:43:54.360823 | ubuntu-noble | + 2026-06-02 09:43:54.360931 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 09:43:54.361031 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 09:43:54.361129 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 09:43:54.361228 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 09:43:54.361318 | ubuntu-noble | + 2026-06-02 09:43:54.361448 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 09:43:54.361555 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 09:43:54.361660 | ubuntu-noble | + 2026-06-02 09:43:54.361759 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 09:43:54.361859 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 09:43:54.361960 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 09:43:54.362050 | ubuntu-noble | + 2026-06-02 09:43:54.362147 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 09:43:54.362246 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 09:43:54.362345 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 09:43:54.362460 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 09:43:54.362560 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 09:43:54.362672 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 09:43:54.362769 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 09:43:54.362867 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 09:43:54.362967 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 09:43:54.363066 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 09:43:54.363166 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 09:43:54.363257 | ubuntu-noble | + 2026-06-02 09:43:54.363352 | ubuntu-noble | +### kde4 2026-06-02 09:43:54.363736 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.363751 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 09:43:54.363755 | ubuntu-noble | + 2026-06-02 09:43:54.363785 | ubuntu-noble | +## dbus-send invocation 2026-06-02 09:43:54.363890 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 09:43:54.363988 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 09:43:54.364092 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 09:43:54.364187 | ubuntu-noble | + 2026-06-02 09:43:54.364282 | ubuntu-noble | +## pkexec invocation 2026-06-02 09:43:54.364383 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 09:43:54.364511 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 09:43:54.364625 | ubuntu-noble | + 2026-06-02 09:43:54.364723 | ubuntu-noble | +## Suspicious shells 2026-06-02 09:43:54.364825 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 09:43:54.364919 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 09:43:54.365016 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 09:43:54.365136 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 09:43:54.366446 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 09:43:54.366469 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 09:43:54.366473 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 09:43:54.366476 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 09:43:54.366480 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 09:43:54.366483 | ubuntu-noble | + 2026-06-02 09:43:54.366487 | ubuntu-noble | +# Web Server Actvity 2026-06-02 09:43:54.366490 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 09:43:54.366494 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 09:43:54.366498 | ubuntu-noble | + 2026-06-02 09:43:54.366501 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 09:43:54.366505 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 09:43:54.366508 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 09:43:54.366515 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 09:43:54.366595 | ubuntu-noble | + 2026-06-02 09:43:54.366694 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 09:43:54.366792 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 09:43:54.366891 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 09:43:54.366985 | ubuntu-noble | + 2026-06-02 09:43:54.367084 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 09:43:54.367186 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 09:43:54.367284 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 09:43:54.367384 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 09:43:54.367501 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 09:43:54.367657 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 09:43:54.367722 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 09:43:54.367822 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 09:43:54.367921 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 09:43:54.368015 | ubuntu-noble | + 2026-06-02 09:43:54.368113 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 09:43:54.368214 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 09:43:54.368314 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 09:43:54.368426 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 09:43:54.368517 | ubuntu-noble | + 2026-06-02 09:43:54.368623 | ubuntu-noble | +## Injection 2026-06-02 09:43:54.368743 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 09:43:54.368825 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 09:43:54.368927 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 09:43:54.369029 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 09:43:54.369129 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 09:43:54.369231 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 09:43:54.369325 | ubuntu-noble | + 2026-06-02 09:43:54.369438 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 09:43:54.369538 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 09:43:54.369673 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 09:43:54.369777 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 09:43:54.369879 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 09:43:54.369972 | ubuntu-noble | + 2026-06-02 09:43:54.370069 | ubuntu-noble | +## Privilege Abuse 2026-06-02 09:43:54.370171 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 09:43:54.370276 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 09:43:54.370368 | ubuntu-noble | + 2026-06-02 09:43:54.370480 | ubuntu-noble | +# Socket Creations 2026-06-02 09:43:54.370601 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 09:43:54.370684 | ubuntu-noble | + 2026-06-02 09:43:54.370786 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 09:43:54.370890 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 09:43:54.370982 | ubuntu-noble | + 2026-06-02 09:43:54.371083 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 09:43:54.371182 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 09:43:54.371272 | ubuntu-noble | + 2026-06-02 09:43:54.371369 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 09:43:54.371474 | ubuntu-noble | + 2026-06-02 09:43:54.371616 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 09:43:54.371681 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 09:43:54.371783 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 09:43:54.371874 | ubuntu-noble | + 2026-06-02 09:43:54.372015 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 09:43:54.372074 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 09:43:54.372166 | ubuntu-noble | + 2026-06-02 09:43:54.372263 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 09:43:54.372363 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 09:43:54.372474 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 09:43:54.372587 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 09:43:54.372691 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 09:43:54.372783 | ubuntu-noble | + 2026-06-02 09:43:54.372881 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 09:43:54.372984 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 09:43:54.373101 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 09:43:54.373183 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 09:43:54.373283 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 09:43:54.373380 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 09:43:54.373493 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 09:43:54.373620 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 09:43:54.373698 | ubuntu-noble | + 2026-06-02 09:43:54.373795 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 09:43:54.373898 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 09:43:54.373999 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 09:43:54.374098 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 09:43:54.374200 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 09:43:54.374301 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 09:43:54.374416 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 09:43:54.374509 | ubuntu-noble | + 2026-06-02 09:43:54.374686 | ubuntu-noble | +# npm 2026-06-02 09:43:54.374716 | ubuntu-noble | +## T1072 third party software 2026-06-02 09:43:54.374812 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 09:43:54.374912 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 09:43:54.375014 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 09:43:54.375106 | ubuntu-noble | + 2026-06-02 09:43:54.375261 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 09:43:54.375332 | ubuntu-noble | +## T1072 third party software 2026-06-02 09:43:54.375443 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 09:43:54.375551 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 09:43:54.375670 | ubuntu-noble | + 2026-06-02 09:43:54.375770 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 09:43:54.375871 | ubuntu-noble | +## T1072 third party software 2026-06-02 09:43:54.375967 | ubuntu-noble | +## https://rubygems.org 2026-06-02 09:43:54.376068 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 09:43:54.376160 | ubuntu-noble | + 2026-06-02 09:43:54.376259 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 09:43:54.376358 | ubuntu-noble | +## T1072 third party software 2026-06-02 09:43:54.376469 | ubuntu-noble | +## https://luarocks.org 2026-06-02 09:43:54.376618 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 09:43:54.376673 | ubuntu-noble | + 2026-06-02 09:43:54.376771 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 09:43:54.376871 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 09:43:54.376972 | ubuntu-noble | +## T1072 third party software 2026-06-02 09:43:54.377438 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 09:43:54.377451 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 09:43:54.377455 | ubuntu-noble | + 2026-06-02 09:43:54.377459 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 09:43:54.377464 | ubuntu-noble | + 2026-06-02 09:43:54.377539 | ubuntu-noble | +## GDS specific secrets 2026-06-02 09:43:54.377652 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 09:43:54.377742 | ubuntu-noble | + 2026-06-02 09:43:54.377842 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 09:43:54.377946 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 09:43:54.378047 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 09:43:54.378138 | ubuntu-noble | + 2026-06-02 09:43:54.378238 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 09:43:54.378338 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 09:43:54.378442 | ubuntu-noble | + 2026-06-02 09:43:54.378539 | ubuntu-noble | +## Salt 2026-06-02 09:43:54.378658 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 09:43:54.378760 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 09:43:54.378857 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 09:43:54.378955 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 09:43:54.379049 | ubuntu-noble | + 2026-06-02 09:43:54.379141 | ubuntu-noble | +## Otter 2026-06-02 09:43:54.379238 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 09:43:54.379337 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 09:43:54.379442 | ubuntu-noble | + 2026-06-02 09:43:54.379541 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 09:43:54.379651 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 09:43:54.379752 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 09:43:54.379849 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 09:43:54.380426 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.380439 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 09:43:54.380443 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 09:43:54.380446 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 09:43:54.380450 | ubuntu-noble | + 2026-06-02 09:43:54.380453 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 09:43:54.380518 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 09:43:54.380635 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.380736 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 09:43:54.380829 | ubuntu-noble | + 2026-06-02 09:43:54.380931 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 09:43:54.381034 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 09:43:54.381129 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.381230 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 09:43:54.381321 | ubuntu-noble | + 2026-06-02 09:43:54.381432 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 09:43:54.381525 | ubuntu-noble | + 2026-06-02 09:43:54.381636 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 09:43:54.381728 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.381830 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 09:43:54.381922 | ubuntu-noble | + 2026-06-02 09:43:54.382022 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 09:43:54.382120 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 09:43:54.382217 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.382314 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 09:43:54.382432 | ubuntu-noble | + 2026-06-02 09:43:54.382521 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 09:43:54.382646 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 09:43:54.382741 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.382871 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 09:43:54.382944 | ubuntu-noble | + 2026-06-02 09:43:54.383045 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 09:43:54.383144 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 09:43:54.383239 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.383338 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 09:43:54.383448 | ubuntu-noble | + 2026-06-02 09:43:54.383551 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 09:43:54.383663 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 09:43:54.383760 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.383861 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 09:43:54.383955 | ubuntu-noble | + 2026-06-02 09:43:54.384054 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 09:43:54.384152 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 09:43:54.384250 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.384347 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 09:43:54.385428 | ubuntu-noble | + 2026-06-02 09:43:54.385447 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 09:43:54.385451 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 09:43:54.385455 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 09:43:54.385458 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 09:43:54.385462 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 09:43:54.385465 | ubuntu-noble | +### macOS 2026-06-02 09:43:54.385469 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 09:43:54.385472 | ubuntu-noble | + 2026-06-02 09:43:54.385476 | ubuntu-noble | +## Docker 2026-06-02 09:43:54.385482 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 09:43:54.385542 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 09:43:54.385650 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 09:43:54.385745 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 09:43:54.385842 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 09:43:54.385937 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 09:43:54.386036 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 09:43:54.386137 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 09:43:54.386234 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 09:43:54.386333 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 09:43:54.386441 | ubuntu-noble | + 2026-06-02 09:43:54.386538 | ubuntu-noble | +## Virtualization stuff 2026-06-02 09:43:54.386679 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 09:43:54.386779 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 09:43:54.386878 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 09:43:54.386976 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 09:43:54.387075 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 09:43:54.387175 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 09:43:54.387272 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 09:43:54.387366 | ubuntu-noble | + 2026-06-02 09:43:54.387479 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 09:43:54.387602 | ubuntu-noble | + 2026-06-02 09:43:54.387694 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 09:43:54.387785 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 09:43:54.387885 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 09:43:54.387985 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 09:43:54.388086 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 09:43:54.388185 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 09:43:54.388291 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 09:43:54.388390 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 09:43:54.388827 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 09:43:54.388842 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 09:43:54.388846 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 09:43:54.388850 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 09:43:54.389300 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 09:43:54.389307 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 09:43:54.389311 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 09:43:54.389315 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 09:43:54.389321 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 09:43:54.389395 | ubuntu-noble | + 2026-06-02 09:43:54.389509 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 09:43:54.389901 | ubuntu-noble | + 2026-06-02 09:43:54.389908 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 09:43:54.389911 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 09:43:54.389967 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 09:43:54.390067 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 09:43:54.390166 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 09:43:54.390265 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 09:43:54.390364 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 09:43:54.390477 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 09:43:54.390588 | ubuntu-noble | + 2026-06-02 09:43:54.390680 | ubuntu-noble | +### qemu on macOS 2026-06-02 09:43:54.390773 | ubuntu-noble | + 2026-06-02 09:43:54.390877 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 09:43:54.390981 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 09:43:54.391077 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 09:43:54.391178 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 09:43:54.391279 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 09:43:54.391374 | ubuntu-noble | + 2026-06-02 09:43:54.391484 | ubuntu-noble | +## Kubelet 2026-06-02 09:43:54.391618 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 09:43:54.391699 | ubuntu-noble | + 2026-06-02 09:43:54.391797 | ubuntu-noble | +# ipc system call 2026-06-02 09:43:54.391896 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 09:43:54.391989 | ubuntu-noble | + 2026-06-02 09:43:54.392087 | ubuntu-noble | +## msgctl 2026-06-02 09:43:54.392192 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 09:43:54.392288 | ubuntu-noble | +## msgget 2026-06-02 09:43:54.392395 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 09:43:54.392512 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:54.392625 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 09:43:54.392726 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 09:43:54.392818 | ubuntu-noble | + 2026-06-02 09:43:54.392911 | ubuntu-noble | +## semctl 2026-06-02 09:43:54.393015 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 09:43:54.393140 | ubuntu-noble | +## semget 2026-06-02 09:43:54.393214 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 09:43:54.393309 | ubuntu-noble | +## semop 2026-06-02 09:43:54.393426 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 09:43:54.393519 | ubuntu-noble | +## semtimedop 2026-06-02 09:43:54.393631 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 09:43:54.393732 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:54.393879 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 09:43:54.394044 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 09:43:54.394112 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 09:43:54.394221 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 09:43:54.394312 | ubuntu-noble | + 2026-06-02 09:43:54.394421 | ubuntu-noble | +## shmctl 2026-06-02 09:43:54.394526 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 09:43:54.394652 | ubuntu-noble | +## shmget 2026-06-02 09:43:54.394756 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 09:43:54.394910 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 09:43:54.394962 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 09:43:54.395065 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 09:43:54.395159 | ubuntu-noble | + 2026-06-02 09:43:54.395305 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 09:43:54.395373 | ubuntu-noble | + 2026-06-02 09:43:54.397442 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 09:43:54.397464 | ubuntu-noble | + 2026-06-02 09:43:54.397468 | ubuntu-noble | +## Common Shells 2026-06-02 09:43:54.397472 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 09:43:54.397475 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 09:43:54.397479 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 09:43:54.397483 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 09:43:54.397486 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 09:43:54.397490 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 09:43:54.397493 | ubuntu-noble | + 2026-06-02 09:43:54.397497 | ubuntu-noble | +## Root command executions 2026-06-02 09:43:54.397501 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 09:43:54.397504 | ubuntu-noble | + 2026-06-02 09:43:54.397508 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 09:43:54.397511 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 09:43:54.397515 | ubuntu-noble | + 2026-06-02 09:43:54.397518 | ubuntu-noble | +## File Access 2026-06-02 09:43:54.397522 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 09:43:54.397525 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 09:43:54.397530 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 09:43:54.397534 | ubuntu-noble | + 2026-06-02 09:43:54.397540 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 09:43:54.397641 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 09:43:54.397745 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 09:43:54.397838 | ubuntu-noble | + 2026-06-02 09:43:54.397936 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 09:43:54.398042 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 09:43:54.398147 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 09:43:54.398238 | ubuntu-noble | + 2026-06-02 09:43:54.398336 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 09:43:54.398454 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 09:43:54.398559 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 09:43:54.398698 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 09:43:54.398771 | ubuntu-noble | +### bit API. 2026-06-02 09:43:54.398887 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 09:43:54.398979 | ubuntu-noble | + 2026-06-02 09:43:54.399081 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 09:43:54.399173 | ubuntu-noble | + 2026-06-02 09:43:54.399269 | ubuntu-noble | +##-e 2 2026-06-02 09:43:54.399359 | ubuntu-noble | 2026-06-02 09:43:54.399626 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780393433.4700735-2407-138423523177627/.source.rules", "state": "file", "uid": 0} 2026-06-02 09:43:54.399719 | ubuntu-noble | 2026-06-02 09:43:54.399825 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 09:43:55.288217 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ActiveEnterTimestampMonotonic": "406142624", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:47 UTC", "AssertTimestampMonotonic": "406079027", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "49486000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ConditionTimestampMonotonic": "406078989", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2313", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:47 UTC", "ExecMainStartTimestampMonotonic": "406118579", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2312 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2312 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2316 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:47 UTC] ; stop_time=[Tue 2026-06-02 09:43:47 UTC] ; pid=2316 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:47 UTC", "InactiveExitTimestampMonotonic": "406097064", "InvocationID": "9bee0bb42bce49ce932ffc70907c4c15", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2313", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 09:43:47 UTC", "StateChangeTimestampMonotonic": "406142624", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:55.297053 | debian-bookworm | 2026-06-02 09:43:55.297081 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 09:43:55.148271 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ActiveEnterTimestampMonotonic": "700299713", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:48 UTC", "AssertTimestampMonotonic": "700263056", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "32712000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ConditionTimestampMonotonic": "700263016", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2176", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ExecMainStartTimestampMonotonic": "700276167", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2175 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2175 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2179 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2179 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:48 UTC", "InactiveExitTimestampMonotonic": "700269250", "InvocationID": "99547b3555c5496c86a078c24bf5149f", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2176", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3560820736", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2183168", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 09:43:48 UTC", "StateChangeTimestampMonotonic": "700299713", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:55.159630 | ubuntu-noble | 2026-06-02 09:43:55.159963 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 09:43:55.640422 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.065416", "end": "2026-06-02 09:43:55.590248", "msg": "", "rc": 0, "start": "2026-06-02 09:43:55.524832", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2703\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 997\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2703\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 768\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2703", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 997", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2703", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 768", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 09:43:55.640466 | debian-bookworm | 2026-06-02 09:43:55.640472 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 09:43:55.586354 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.004747", "end": "2026-06-02 09:43:55.541787", "msg": "", "rc": 0, "start": "2026-06-02 09:43:55.537040", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 09:43:55.586431 | ubuntu-noble | 2026-06-02 09:43:55.586442 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 09:43:56.288915 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:55 UTC", "ActiveEnterTimestampMonotonic": "413546258", "ActiveExitTimestamp": "Tue 2026-06-02 09:43:55 UTC", "ActiveExitTimestampMonotonic": "413376922", "ActiveState": "active", "After": "local-fs.target systemd-tmpfiles-setup.service system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:55 UTC", "AssertTimestampMonotonic": "413417694", "Before": "shutdown.target systemd-update-utmp.service sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "159214000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:55 UTC", "ConditionTimestampMonotonic": "413417653", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3406", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2703", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:55 UTC", "ExecMainStartTimestampMonotonic": "413456894", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:55 UTC] ; stop_time=[Tue 2026-06-02 09:43:55 UTC] ; pid=2701 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:55 UTC] ; stop_time=[Tue 2026-06-02 09:43:55 UTC] ; pid=2701 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:55 UTC] ; stop_time=[Tue 2026-06-02 09:43:55 UTC] ; pid=2706 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:55 UTC] ; stop_time=[Tue 2026-06-02 09:43:55 UTC] ; pid=2706 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 09:43:55 UTC", "InactiveEnterTimestampMonotonic": "413416698", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:55 UTC", "InactiveExitTimestampMonotonic": "413435140", "InvocationID": "b5bee96e815f4fb4898ba9fc7620cd10", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2703", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2084864", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 09:43:55 UTC", "StateChangeTimestampMonotonic": "413546258", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:56.291484 | debian-bookworm | 2026-06-02 09:43:56.291506 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 09:43:56.291511 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 09:43:56.291516 | debian-bookworm | 2026-06-02 09:43:55.912944 | ubuntu-noble | --- before 2026-06-02 09:43:55.913034 | ubuntu-noble | +++ after 2026-06-02 09:43:55.913140 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 09:43:55.913239 | ubuntu-noble | { 2026-06-02 09:43:55.913353 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 09:43:55.913471 | ubuntu-noble | - "state": "file" 2026-06-02 09:43:55.913577 | ubuntu-noble | + "state": "absent" 2026-06-02 09:43:55.913672 | ubuntu-noble | } 2026-06-02 09:43:55.913765 | ubuntu-noble | 2026-06-02 09:43:55.913876 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 09:43:55.913987 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 09:43:55.914076 | ubuntu-noble | 2026-06-02 09:43:55.914183 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 09:43:56.360471 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 09:43:56.361550 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 09:43:56.572076 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ActiveEnterTimestampMonotonic": "700299713", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:48 UTC", "AssertTimestampMonotonic": "700263056", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "33722000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ConditionTimestampMonotonic": "700263016", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2176", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:48 UTC", "ExecMainStartTimestampMonotonic": "700276167", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2175 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2175 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2179 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:48 UTC] ; stop_time=[Tue 2026-06-02 09:43:48 UTC] ; pid=2179 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:48 UTC", "InactiveExitTimestampMonotonic": "700269250", "InvocationID": "99547b3555c5496c86a078c24bf5149f", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2176", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3560697856", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2183168", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 09:43:48 UTC", "StateChangeTimestampMonotonic": "700299713", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:56.578196 | ubuntu-noble | 2026-06-02 09:43:56.578235 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 09:43:56.949244 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.053248", "end": "2026-06-02 09:43:56.892844", "msg": "", "rc": 0, "start": "2026-06-02 09:43:56.839596", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2569\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 983\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2569\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 982\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2569", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 983", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2569", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 982", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 09:43:56.949300 | ubuntu-noble | 2026-06-02 09:43:56.949308 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 09:43:57.620621 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 09:43:56 UTC", "ActiveEnterTimestampMonotonic": "708766977", "ActiveExitTimestamp": "Tue 2026-06-02 09:43:56 UTC", "ActiveExitTimestampMonotonic": "708644230", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 09:43:56 UTC", "AssertTimestampMonotonic": "708682784", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "130002000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 09:43:56 UTC", "ConditionTimestampMonotonic": "708682746", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2569", "ExecMainStartTimestamp": "Tue 2026-06-02 09:43:56 UTC", "ExecMainStartTimestampMonotonic": "708709627", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 09:43:56 UTC] ; stop_time=[Tue 2026-06-02 09:43:56 UTC] ; pid=2567 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 09:43:56 UTC] ; stop_time=[Tue 2026-06-02 09:43:56 UTC] ; pid=2567 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 09:43:56 UTC] ; stop_time=[Tue 2026-06-02 09:43:56 UTC] ; pid=2573 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 09:43:56 UTC] ; stop_time=[Tue 2026-06-02 09:43:56 UTC] ; pid=2573 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 09:43:56 UTC", "InactiveEnterTimestampMonotonic": "708681924", "InactiveExitTimestamp": "Tue 2026-06-02 09:43:56 UTC", "InactiveExitTimestampMonotonic": "708691336", "InvocationID": "2b60801433e34bb191c6fae842d2e992", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2569", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3577397248", "MemoryCurrent": "1859584", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2285568", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 09:43:56 UTC", "StateChangeTimestampMonotonic": "708766977", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 09:43:57.621863 | ubuntu-noble | 2026-06-02 09:43:57.621985 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 09:43:57.622102 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 09:43:57.622201 | ubuntu-noble | 2026-06-02 09:43:57.704824 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 09:43:57.705117 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 09:43:57.846399 | debian-bookworm | ok: Runtime: 0:00:17.098509 2026-06-02 09:43:57.865908 | ubuntu-noble | ok: Runtime: 0:00:18.469934 2026-06-02 09:43:57.885228 | 2026-06-02 09:43:57.885385 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 09:43:58.596530 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:58.608297 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:58.628754 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 09:43:58.640222 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:59.101362 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:59.102030 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:59.124022 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:59.129603 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 09:43:59.129708 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:43:59.143205 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 09:43:59.144519 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 09:43:59.166278 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 09:43:59.171961 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 09:43:59.172061 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 09:44:00.669718 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 09:44:00.671673 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 09:44:00.672832 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:44:00.672846 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:44:00.672855 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:44:00.672864 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:44:00.672871 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:44:00.672877 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 09:44:00.672883 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:44:00.672890 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 09:44:00.672896 | debian-bookworm | 2026-06-02 09:44:00.672994 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:44:00.673003 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 09:44:00.673009 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:44:00.673015 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 09:44:00.673022 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:44:00.673028 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:44:00.673034 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:44:00.673042 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:44:00.673052 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:44:00.673062 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:44:00.673071 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:44:00.673080 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:44:00.673089 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:44:00.673099 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:44:00.673109 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:44:00.673120 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:44:00.673129 | debian-bookworm | 2026-06-02 09:44:00.673362 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:44:00.634921 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 09:44:00.636593 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 09:44:00.637771 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 09:44:00.637784 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 09:44:00.637793 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 09:44:00.637801 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 09:44:00.637807 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 09:44:00.637813 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 09:44:00.637819 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 09:44:00.637825 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 09:44:00.637831 | ubuntu-noble | 2026-06-02 09:44:00.637925 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 09:44:00.637933 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 09:44:00.637939 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 09:44:00.637945 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 09:44:00.637951 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 09:44:00.637957 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 09:44:00.637963 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 09:44:00.637969 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 09:44:00.637975 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 09:44:00.637981 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 09:44:00.637987 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 09:44:00.637993 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 09:44:00.637999 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 09:44:00.638004 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 09:44:00.638010 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 09:44:00.638016 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:44:00.638022 | ubuntu-noble | 2026-06-02 09:44:00.638103 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 09:44:00.899025 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 09:44:00.912450 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 09:44:00.914439 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 09:44:00.914463 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 09:44:00.914470 | ubuntu-noble | registered third-party plugins: 2026-06-02 09:44:00.914475 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 09:44:00.914480 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 09:44:00.914490 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 09:44:00.939532 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 09:44:00.968408 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 09:44:00.968542 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 09:44:00.968707 | debian-bookworm | using: pytest-8.4.2 2026-06-02 09:44:00.968834 | debian-bookworm | registered third-party plugins: 2026-06-02 09:44:00.969168 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 09:44:00.969326 | debian-bookworm | rootdir: /home/zuul 2026-06-02 09:44:00.969448 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 09:44:02.014087 | debian-bookworm | collecting ... collected 6 items 2026-06-02 09:44:02.014558 | debian-bookworm | 2026-06-02 09:44:01.982971 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 09:44:01.983161 | ubuntu-noble | 2026-06-02 09:44:06.325988 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 09:44:06.362215 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 09:44:06.699240 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 09:44:06.748075 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 09:44:08.834199 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 09:44:09.365188 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 09:44:13.877947 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 09:44:14.022953 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 09:44:15.163756 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 09:44:15.230702 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 09:44:15.230762 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 09:44:15.230772 | debian-bookworm | 2026-06-02 09:44:15.230782 | debian-bookworm | ============================== 6 passed in 14.24s ============================== 2026-06-02 09:44:15.258981 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 09:44:15.259444 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 09:44:15.260485 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 09:44:15.154948 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 09:44:15.227122 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 09:44:15.227856 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 09:44:15.230086 | ubuntu-noble | 2026-06-02 09:44:15.230116 | ubuntu-noble | ============================== 6 passed in 14.27s ============================== 2026-06-02 09:44:15.273916 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 09:44:15.274140 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 09:44:15.274684 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 09:44:15.462707 | debian-bookworm | ok: Runtime: 0:00:17.066448 2026-06-02 09:44:15.473480 | ubuntu-noble | ok: Runtime: 0:00:17.051957 2026-06-02 09:44:15.481698 | 2026-06-02 09:44:15.481837 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 09:44:16.049485 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:44:16.050818 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:44:16.074211 | 2026-06-02 09:44:16.074385 | PLAY RECAP 2026-06-02 09:44:16.074463 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 09:44:16.074503 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 09:44:16.074529 | 2026-06-02 09:44:16.253931 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 09:44:16.255630 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 09:44:17.065851 | 2026-06-02 09:44:17.066037 | PLAY [Collect container logs] 2026-06-02 09:44:17.080714 | 2026-06-02 09:44:17.080863 | TASK [Create container log directory] 2026-06-02 09:44:17.755652 | debian-bookworm | changed 2026-06-02 09:44:17.777353 | ubuntu-noble | changed 2026-06-02 09:44:17.783909 | 2026-06-02 09:44:17.784056 | TASK [Capture container overview] 2026-06-02 09:44:18.345663 | debian-bookworm | ok: Runtime: 0:00:00.009043 2026-06-02 09:44:18.358449 | ubuntu-noble | ok: Runtime: 0:00:00.012154 2026-06-02 09:44:18.367076 | 2026-06-02 09:44:18.367204 | TASK [List containers] 2026-06-02 09:44:18.930056 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 09:44:18.930776 | debian-bookworm | { 2026-06-02 09:44:18.930981 | debian-bookworm | "failed_when_result": false, 2026-06-02 09:44:18.931062 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 09:44:18.931138 | debian-bookworm | "rc": 2 2026-06-02 09:44:18.931199 | debian-bookworm | } 2026-06-02 09:44:18.942862 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 09:44:18.943068 | ubuntu-noble | { 2026-06-02 09:44:18.943126 | ubuntu-noble | "failed_when_result": false, 2026-06-02 09:44:18.943168 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 09:44:18.943205 | ubuntu-noble | "rc": 2 2026-06-02 09:44:18.943238 | ubuntu-noble | } 2026-06-02 09:44:18.950410 | 2026-06-02 09:44:18.950522 | LOOP [Save per-container logs] 2026-06-02 09:44:19.023952 | 2026-06-02 09:44:19.024154 | LOOP [Save per-container inspect (state and health)] 2026-06-02 09:44:19.092493 | 2026-06-02 09:44:19.092806 | TASK [Capture netbox systemd unit journal] 2026-06-02 09:44:19.661230 | debian-bookworm | ok: Runtime: 0:00:00.016060 2026-06-02 09:44:19.666491 | ubuntu-noble | ok: Runtime: 0:00:00.013987 2026-06-02 09:44:19.671675 | 2026-06-02 09:44:19.671850 | TASK [Capture netbox service state] 2026-06-02 09:44:20.261801 | debian-bookworm | ok: Runtime: 0:00:00.028367 2026-06-02 09:44:20.274696 | ubuntu-noble | ok: Runtime: 0:00:00.029158 2026-06-02 09:44:20.283373 | 2026-06-02 09:44:20.283531 | TASK [Capture docker compose version] 2026-06-02 09:44:20.857398 | debian-bookworm | ok: Runtime: 0:00:00.010236 2026-06-02 09:44:20.872002 | ubuntu-noble | ok: Runtime: 0:00:00.010170 2026-06-02 09:44:20.881924 | 2026-06-02 09:44:20.882108 | TASK [Open container log permissions] 2026-06-02 09:44:21.202589 | debian-bookworm | changed 2026-06-02 09:44:21.240910 | ubuntu-noble | changed 2026-06-02 09:44:21.242892 | 2026-06-02 09:44:21.243045 | PLAY RECAP 2026-06-02 09:44:21.243145 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 09:44:21.243203 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 09:44:21.243241 | 2026-06-02 09:44:21.405071 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 09:44:21.407660 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 09:44:22.206572 | 2026-06-02 09:44:22.206734 | PLAY [Base post-fetch] 2026-06-02 09:44:22.222422 | 2026-06-02 09:44:22.222566 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 09:44:22.294970 | debian-bookworm | ok 2026-06-02 09:44:22.300549 | ubuntu-noble | ok 2026-06-02 09:44:22.305559 | 2026-06-02 09:44:22.305691 | TASK [fetch-output : Set log path for single node] 2026-06-02 09:44:22.330409 | debian-bookworm | skipping: Conditional result was False 2026-06-02 09:44:22.341363 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 09:44:22.347980 | 2026-06-02 09:44:22.348097 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 09:44:22.859602 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/logs/debian-bookworm" 2026-06-02 09:44:22.861945 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/logs/ubuntu-noble" 2026-06-02 09:44:23.134080 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/artifacts" 2026-06-02 09:44:23.185275 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/artifacts" 2026-06-02 09:44:23.409071 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/docs" 2026-06-02 09:44:23.465555 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/f809423eb801490cbb82cbb1b4eb8ab1/work/docs" 2026-06-02 09:44:23.465904 | ubuntu-noble -> localhost | changed: All items complete 2026-06-02 09:44:23.465994 | 2026-06-02 09:44:23.484077 | 2026-06-02 09:44:23.484250 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 09:44:24.280412 | debian-bookworm | changed: 2026-06-02 09:44:24.280894 | debian-bookworm | .d..t...... ./ 2026-06-02 09:44:24.280944 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 09:44:24.280970 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 09:44:24.280992 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 09:44:24.281014 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 09:44:24.281035 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 09:44:24.281056 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 09:44:24.281076 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 09:44:24.281096 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 09:44:24.286442 | ubuntu-noble | changed: 2026-06-02 09:44:24.286535 | ubuntu-noble | .d..t...... ./ 2026-06-02 09:44:24.286568 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 09:44:24.286593 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 09:44:24.286615 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 09:44:24.286636 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 09:44:24.286656 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 09:44:24.286676 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 09:44:24.286696 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 09:44:24.286715 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 09:44:24.848680 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 09:44:24.873334 | debian-bookworm | ok 2026-06-02 09:44:25.437515 | debian-bookworm | changed: .d..t...... ./ 2026-06-02 09:44:25.450371 | ubuntu-noble | ok 2026-06-02 09:44:25.450492 | ubuntu-noble | changed: All items complete 2026-06-02 09:44:25.450522 | 2026-06-02 09:44:25.479657 | 2026-06-02 09:44:25.479828 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 09:44:25.992984 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.011229 2026-06-02 09:44:26.280127 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.011017 2026-06-02 09:44:26.300033 | 2026-06-02 09:44:26.300159 | PLAY RECAP 2026-06-02 09:44:26.300215 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 09:44:26.300249 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 09:44:26.300270 | 2026-06-02 09:44:26.444007 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 09:44:26.445471 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 09:44:27.213429 | 2026-06-02 09:44:27.213601 | PLAY [Base post] 2026-06-02 09:44:27.227642 | 2026-06-02 09:44:27.227801 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 09:44:28.060043 | debian-bookworm | changed 2026-06-02 09:44:28.105373 | ubuntu-noble | changed 2026-06-02 09:44:28.124029 | 2026-06-02 09:44:28.124361 | PLAY RECAP 2026-06-02 09:44:28.124548 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 09:44:28.124619 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 09:44:28.124662 | 2026-06-02 09:44:28.269538 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 09:44:28.271290 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 09:44:29.098378 | 2026-06-02 09:44:29.098560 | PLAY [Base post-logs] 2026-06-02 09:44:29.109510 | 2026-06-02 09:44:29.109652 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 09:44:29.609562 | localhost | changed 2026-06-02 09:44:29.636383 | 2026-06-02 09:44:29.636604 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 09:44:29.676671 | localhost | ok 2026-06-02 09:44:29.684433 | 2026-06-02 09:44:29.684603 | TASK [Set zuul-log-path fact] 2026-06-02 09:44:29.714190 | localhost | ok 2026-06-02 09:44:29.729399 | 2026-06-02 09:44:29.729532 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 09:44:29.766937 | localhost | ok 2026-06-02 09:44:29.774230 | 2026-06-02 09:44:29.774437 | TASK [upload-logs : Create log directories] 2026-06-02 09:44:30.294409 | localhost | changed 2026-06-02 09:44:30.303479 | 2026-06-02 09:44:30.303665 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 09:44:30.802311 | localhost -> localhost | ok: Runtime: 0:00:00.007562 2026-06-02 09:44:30.808781 | 2026-06-02 09:44:30.808939 | TASK [upload-logs : Upload logs to log server] 2026-06-02 09:44:31.416556 | localhost | Output suppressed because no_log was given 2026-06-02 09:44:31.418603 | 2026-06-02 09:44:31.419068 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 09:44:31.483515 | localhost | skipping: Conditional result was False 2026-06-02 09:44:31.489848 | localhost | skipping: Conditional result was False 2026-06-02 09:44:31.496742 | 2026-06-02 09:44:31.496865 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 09:44:31.561860 | localhost | skipping: Conditional result was False 2026-06-02 09:44:31.562629 | 2026-06-02 09:44:31.564121 | localhost | skipping: Conditional result was False 2026-06-02 09:44:31.578465 | 2026-06-02 09:44:31.578699 | LOOP [upload-logs : Upload console log and json output]