2026-06-02 05:52:32.436833 | Job console starting 2026-06-02 05:52:32.472056 | Updating git repos 2026-06-02 05:52:32.526421 | Cloning repos into workspace 2026-06-02 05:52:32.627152 | Restoring repo states 2026-06-02 05:52:32.647906 | Merging changes 2026-06-02 05:52:33.196251 | Checking out repos 2026-06-02 05:52:33.255566 | Preparing playbooks 2026-06-02 05:52:34.118982 | Running Ansible setup 2026-06-02 05:52:40.679640 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 05:52:41.495328 | 2026-06-02 05:52:41.495536 | PLAY [Base pre] 2026-06-02 05:52:41.513896 | 2026-06-02 05:52:41.514056 | TASK [Setup log path fact] 2026-06-02 05:52:41.544851 | debian-bookworm | ok 2026-06-02 05:52:41.560428 | 2026-06-02 05:52:41.560617 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 05:52:41.590021 | debian-bookworm | ok 2026-06-02 05:52:41.600944 | 2026-06-02 05:52:41.601070 | TASK [emit-job-header : Print job information] 2026-06-02 05:52:41.641653 | # Job Information 2026-06-02 05:52:41.641877 | Ansible Version: 2.16.14 2026-06-02 05:52:41.641921 | Job: ansible-collection-services-molecule-auditd 2026-06-02 05:52:41.641965 | Pipeline: check 2026-06-02 05:52:41.641994 | Executor: 521e9411259a 2026-06-02 05:52:41.642020 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 05:52:41.642048 | Event ID: 385e2920-5e47-11f1-9a38-545fd9c28483 2026-06-02 05:52:41.648767 | 2026-06-02 05:52:41.648891 | LOOP [emit-job-header : Print node information] 2026-06-02 05:52:41.766080 | debian-bookworm | ok: 2026-06-02 05:52:41.774961 | debian-bookworm | # Node Information 2026-06-02 05:52:41.775092 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 05:52:41.775123 | debian-bookworm | Hostname: debian 2026-06-02 05:52:41.775148 | debian-bookworm | Username: zuul 2026-06-02 05:52:41.775171 | debian-bookworm | Distro: Debian 12.14 2026-06-02 05:52:41.775195 | debian-bookworm | Provider: regiocloud-a 2026-06-02 05:52:41.775216 | debian-bookworm | Region: 2026-06-02 05:52:41.775237 | debian-bookworm | Label: debian-bookworm 2026-06-02 05:52:41.775258 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 05:52:41.775278 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe14:f8ae 2026-06-02 05:52:41.840581 | debian-bookworm | ok: 2026-06-02 05:52:41.840758 | debian-bookworm | # Node Information 2026-06-02 05:52:41.840811 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 05:52:41.840851 | debian-bookworm | Hostname: ubuntu 2026-06-02 05:52:41.840893 | debian-bookworm | Username: zuul 2026-06-02 05:52:41.840928 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 05:52:41.840962 | debian-bookworm | Provider: regiocloud-a 2026-06-02 05:52:41.841002 | debian-bookworm | Region: 2026-06-02 05:52:41.841041 | debian-bookworm | Label: ubuntu-noble 2026-06-02 05:52:41.841081 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 05:52:41.841120 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:feef:57fa 2026-06-02 05:52:41.863290 | 2026-06-02 05:52:41.863453 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 05:52:42.344444 | debian-bookworm -> localhost | changed 2026-06-02 05:52:42.353133 | 2026-06-02 05:52:42.353264 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 05:52:43.385694 | debian-bookworm -> localhost | changed 2026-06-02 05:52:43.398275 | ubuntu-noble -> localhost | ok 2026-06-02 05:52:43.413685 | 2026-06-02 05:52:43.413808 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 05:52:43.691752 | debian-bookworm -> localhost | ok 2026-06-02 05:52:43.700153 | 2026-06-02 05:52:43.700299 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 05:52:43.732827 | debian-bookworm | ok 2026-06-02 05:52:43.737708 | ubuntu-noble | ok 2026-06-02 05:52:43.757187 | debian-bookworm | included: /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 05:52:43.757292 | ubuntu-noble | included: /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 05:52:43.763846 | 2026-06-02 05:52:43.763940 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 05:52:46.361882 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 05:52:46.362143 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/400afce5f9814af1b18787256ed88fcb_id_rsa 2026-06-02 05:52:46.362181 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/400afce5f9814af1b18787256ed88fcb_id_rsa.pub 2026-06-02 05:52:46.362209 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 05:52:46.362237 | debian-bookworm -> localhost | SHA256:3i25GY7vs3Qrn9r9l+Y5GZ1zrs7ovNG5xgmkNN356dw zuul-build-sshkey 2026-06-02 05:52:46.362262 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 05:52:46.362288 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 05:52:46.362389 | debian-bookworm -> localhost | | | 2026-06-02 05:52:46.362421 | debian-bookworm -> localhost | | | 2026-06-02 05:52:46.362443 | debian-bookworm -> localhost | | . . . | 2026-06-02 05:52:46.362479 | debian-bookworm -> localhost | | o o o | 2026-06-02 05:52:46.362500 | debian-bookworm -> localhost | | S. + .+| 2026-06-02 05:52:46.362519 | debian-bookworm -> localhost | | . ..o.. *+| 2026-06-02 05:52:46.362539 | debian-bookworm -> localhost | | . * +o=oB| 2026-06-02 05:52:46.362560 | debian-bookworm -> localhost | | +oO B+OE| 2026-06-02 05:52:46.362580 | debian-bookworm -> localhost | | .oOBX+O=+| 2026-06-02 05:52:46.362599 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 05:52:46.362655 | debian-bookworm -> localhost | ok: Runtime: 0:00:02.109825 2026-06-02 05:52:46.369937 | 2026-06-02 05:52:46.370073 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 05:52:46.393397 | debian-bookworm | ok 2026-06-02 05:52:46.408519 | ubuntu-noble | ok 2026-06-02 05:52:46.422655 | debian-bookworm | included: /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 05:52:46.422817 | ubuntu-noble | included: /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 05:52:46.435451 | 2026-06-02 05:52:46.435586 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 05:52:46.460147 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:52:46.471146 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:52:46.478198 | 2026-06-02 05:52:46.478301 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 05:52:47.112575 | debian-bookworm | changed 2026-06-02 05:52:47.296149 | ubuntu-noble | changed 2026-06-02 05:52:47.304458 | 2026-06-02 05:52:47.304606 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 05:52:47.568443 | debian-bookworm | ok 2026-06-02 05:52:47.632148 | ubuntu-noble | ok 2026-06-02 05:52:47.641322 | 2026-06-02 05:52:47.641543 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 05:52:48.290426 | debian-bookworm | changed 2026-06-02 05:52:48.469079 | ubuntu-noble | changed 2026-06-02 05:52:48.475029 | 2026-06-02 05:52:48.475152 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 05:52:49.159048 | debian-bookworm | changed 2026-06-02 05:52:49.215827 | ubuntu-noble | changed 2026-06-02 05:52:49.221193 | 2026-06-02 05:52:49.221295 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 05:52:49.248122 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:52:49.260096 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:52:49.271729 | 2026-06-02 05:52:49.271896 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 05:52:49.671427 | debian-bookworm -> localhost | changed 2026-06-02 05:52:49.704929 | 2026-06-02 05:52:49.705071 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 05:52:50.083516 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/400afce5f9814af1b18787256ed88fcb_id_rsa (zuul-build-sshkey) 2026-06-02 05:52:50.083802 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.022457 2026-06-02 05:52:50.090532 | 2026-06-02 05:52:50.090651 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 05:52:50.460799 | debian-bookworm | ok 2026-06-02 05:52:50.594268 | ubuntu-noble | ok 2026-06-02 05:52:50.603134 | 2026-06-02 05:52:50.603338 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 05:52:50.630091 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:52:50.641353 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:52:50.657743 | 2026-06-02 05:52:50.657864 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 05:52:51.057277 | debian-bookworm | ok 2026-06-02 05:52:51.113944 | ubuntu-noble | ok 2026-06-02 05:52:51.130233 | 2026-06-02 05:52:51.130393 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 05:52:51.163677 | debian-bookworm | ok 2026-06-02 05:52:51.179270 | ubuntu-noble | ok 2026-06-02 05:52:51.184856 | 2026-06-02 05:52:51.184983 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 05:52:51.462379 | debian-bookworm -> localhost | ok 2026-06-02 05:52:51.469291 | 2026-06-02 05:52:51.469412 | TASK [validate-host : Collect information about the host] 2026-06-02 05:52:52.589391 | debian-bookworm | ok 2026-06-02 05:52:52.781097 | ubuntu-noble | ok 2026-06-02 05:52:52.792649 | 2026-06-02 05:52:52.792791 | TASK [validate-host : Sanitize hostname] 2026-06-02 05:52:52.890389 | debian-bookworm | ok 2026-06-02 05:52:52.912182 | ubuntu-noble | ok 2026-06-02 05:52:52.919575 | 2026-06-02 05:52:52.919795 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 05:52:53.615705 | ubuntu-noble -> localhost | changed 2026-06-02 05:52:53.627177 | debian-bookworm -> localhost | changed 2026-06-02 05:52:53.633088 | 2026-06-02 05:52:53.633206 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 05:52:54.141287 | debian-bookworm | ok 2026-06-02 05:52:54.188969 | ubuntu-noble | ok 2026-06-02 05:52:54.195712 | 2026-06-02 05:52:54.195834 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 05:52:54.790625 | ubuntu-noble -> localhost | changed 2026-06-02 05:52:54.794085 | debian-bookworm -> localhost | changed 2026-06-02 05:52:54.817674 | 2026-06-02 05:52:54.818031 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 05:52:55.089977 | debian-bookworm | ok 2026-06-02 05:52:55.167686 | ubuntu-noble | ok 2026-06-02 05:52:55.188601 | 2026-06-02 05:52:55.188808 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 05:52:56.425421 | ubuntu-noble | changed: 2026-06-02 05:52:56.425723 | ubuntu-noble | cd+++++++++ src/ 2026-06-02 05:52:56.425760 | ubuntu-noble | cd+++++++++ src/github.com/ 2026-06-02 05:52:56.425785 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2026-06-02 05:52:56.425807 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 05:52:56.425828 | ubuntu-noble | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:19.728642 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:19.756972 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:20.465058 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:20.465740 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:20.491675 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:20.498176 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 05:54:20.498229 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:20.302787 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:20.303414 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:20.324474 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:20.330197 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 05:54:20.330401 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:21.564902 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 05:54:21.565289 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 05:54:21.923438 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 05:54:21.924263 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 05:54:21.912130 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 05:54:21.912535 | debian-bookworm | config file = None 2026-06-02 05:54:21.912830 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 05:54:21.913182 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 05:54:21.913509 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 05:54:21.913763 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 05:54:21.914017 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 05:54:21.914299 | debian-bookworm | jinja version = 3.1.6 2026-06-02 05:54:21.914554 | debian-bookworm | libyaml = True 2026-06-02 05:54:21.914787 | debian-bookworm | No config file found; using defaults 2026-06-02 05:54:21.915157 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 05:54:21.918020 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 05:54:21.918436 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 05:54:21.955028 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 05:54:21.955304 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 05:54:21.955819 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 05:54:21.956275 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 05:54:21.956586 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 05:54:21.956987 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 05:54:21.957312 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 05:54:21.957616 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 05:54:21.958221 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 05:54:21.958598 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 05:54:21.958814 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 05:54:21.959139 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 05:54:21.961397 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 05:54:21.961796 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 05:54:21.963409 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 05:54:21.963825 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 05:54:21.964447 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 05:54:21.964730 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 05:54:21.964954 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 05:54:21.965280 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 05:54:21.965939 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 05:54:21.966191 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 05:54:21.967378 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 05:54:21.967728 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 05:54:21.967969 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 05:54:21.968274 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 05:54:21.968993 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 05:54:21.969290 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 05:54:21.969961 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 05:54:21.970261 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 05:54:21.970454 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 05:54:21.970796 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 05:54:21.971468 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 05:54:21.971821 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 05:54:21.972113 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 05:54:21.972416 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 05:54:21.972721 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 05:54:21.972987 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 05:54:21.973266 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 05:54:21.973551 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 05:54:21.974598 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 05:54:21.974909 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 05:54:21.976820 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 05:54:21.977122 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 05:54:21.977309 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 05:54:21.977630 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 05:54:21.979198 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 05:54:21.979553 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 05:54:21.980209 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 05:54:21.980508 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 05:54:21.980691 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 05:54:21.981006 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 05:54:21.983538 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 05:54:21.983897 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 05:54:21.984638 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 05:54:21.984945 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 05:54:21.985371 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 05:54:21.985671 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 05:54:21.986002 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 05:54:21.986272 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 05:54:21.986705 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 05:54:21.986985 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 05:54:21.992916 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 05:54:21.993263 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 05:54:21.993609 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 05:54:21.993917 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 05:54:21.994624 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 05:54:21.994946 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 05:54:21.995245 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 05:54:21.995582 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 05:54:21.995787 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 05:54:21.996067 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 05:54:21.996836 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 05:54:21.997157 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 05:54:21.999593 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 05:54:21.999914 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 05:54:22.000323 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 05:54:22.000627 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 05:54:22.000877 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 05:54:22.001185 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 05:54:22.001581 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 05:54:22.001867 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 05:54:22.002121 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 05:54:22.002371 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 05:54:22.002660 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 05:54:22.002941 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 05:54:22.003127 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 05:54:22.003427 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 05:54:22.003881 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 05:54:22.004139 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 05:54:22.004518 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 05:54:22.004790 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 05:54:22.005866 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 05:54:22.006203 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 05:54:22.006731 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 05:54:22.007032 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 05:54:22.007253 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 05:54:22.007552 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 05:54:22.008857 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 05:54:22.009184 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 05:54:22.009567 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 05:54:22.009864 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 05:54:22.010154 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 05:54:22.010431 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 05:54:22.010873 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 05:54:22.011160 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 05:54:22.012695 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 05:54:22.013030 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 05:54:22.013353 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 05:54:22.013652 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 05:54:22.014301 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 05:54:22.014626 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 05:54:22.014949 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 05:54:22.015223 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 05:54:22.018676 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 05:54:22.019030 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 05:54:22.019885 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 05:54:22.020193 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 05:54:22.020683 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 05:54:22.021004 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 05:54:22.024451 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 05:54:22.024822 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 05:54:22.033059 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 05:54:22.033393 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 05:54:22.033875 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 05:54:22.034191 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 05:54:22.035617 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 05:54:22.035962 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 05:54:22.036269 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 05:54:22.036597 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 05:54:22.037013 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 05:54:22.037280 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 05:54:22.037653 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 05:54:22.037939 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 05:54:22.038301 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 05:54:22.038590 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 05:54:22.038925 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 05:54:22.039213 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 05:54:22.039571 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 05:54:22.039816 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 05:54:22.040036 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 05:54:22.040308 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 05:54:22.040770 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 05:54:22.041053 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 05:54:22.041528 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 05:54:22.041825 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 05:54:22.042134 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 05:54:22.042405 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 05:54:22.044303 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 05:54:22.044678 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 05:54:22.044994 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 05:54:22.045296 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 05:54:22.045580 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 05:54:22.045868 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 05:54:22.046217 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 05:54:22.046523 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 05:54:22.046833 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 05:54:22.047095 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 05:54:22.047906 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 05:54:22.048211 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 05:54:22.049172 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 05:54:22.049459 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 05:54:22.049868 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 05:54:22.050172 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 05:54:22.050523 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 05:54:22.050811 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 05:54:22.051097 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 05:54:22.051375 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 05:54:22.052361 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 05:54:22.052722 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 05:54:22.053087 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 05:54:22.053377 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 05:54:22.053770 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 05:54:22.054067 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 05:54:22.054328 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 05:54:22.054808 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 05:54:22.055063 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 05:54:22.055414 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 05:54:22.055955 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 05:54:22.056566 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 05:54:22.057426 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 05:54:22.058059 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 05:54:22.059674 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 05:54:22.060051 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 05:54:22.061259 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 05:54:22.061714 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 05:54:22.062172 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 05:54:22.062566 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 05:54:22.062810 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 05:54:22.063239 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 05:54:22.064398 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 05:54:22.064742 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 05:54:22.065362 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 05:54:22.065663 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 05:54:22.070319 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 05:54:22.070646 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 05:54:22.075024 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 05:54:22.075235 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 05:54:22.075467 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 05:54:22.348304 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 05:54:22.348359 | ubuntu-noble | config file = None 2026-06-02 05:54:22.348367 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 05:54:22.348373 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 05:54:22.348384 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 05:54:22.348392 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 05:54:22.348558 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 05:54:22.348830 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 05:54:22.349129 | ubuntu-noble | libyaml = True 2026-06-02 05:54:22.349439 | ubuntu-noble | No config file found; using defaults 2026-06-02 05:54:22.349974 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 05:54:22.359758 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 05:54:22.360358 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 05:54:22.371143 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 05:54:22.371567 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 05:54:22.436102 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 05:54:22.436958 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 05:54:22.438496 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 05:54:22.439029 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 05:54:22.439476 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 05:54:22.439874 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 05:54:22.440321 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 05:54:22.440783 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 05:54:22.441339 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 05:54:22.441863 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 05:54:22.442342 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 05:54:22.442826 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 05:54:22.443284 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 05:54:22.443677 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 05:54:22.444086 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 05:54:22.444512 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 05:54:22.444961 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 05:54:22.445430 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 05:54:22.445760 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 05:54:22.446124 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 05:54:22.448297 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 05:54:22.448870 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 05:54:22.449281 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 05:54:22.449609 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 05:54:22.450085 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 05:54:22.450448 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 05:54:22.450903 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 05:54:22.451284 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 05:54:22.451707 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 05:54:22.452051 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 05:54:22.452392 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 05:54:22.452800 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 05:54:22.453162 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 05:54:22.454035 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 05:54:22.454556 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 05:54:22.454875 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 05:54:22.455386 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 05:54:22.457294 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 05:54:22.457321 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 05:54:22.457326 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 05:54:22.457330 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 05:54:22.457335 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 05:54:22.458183 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 05:54:22.458508 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 05:54:22.458907 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 05:54:22.459281 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 05:54:22.459728 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 05:54:22.460029 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 05:54:22.470058 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 05:54:22.470379 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 05:54:22.473358 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 05:54:22.473759 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 05:54:22.474461 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 05:54:22.474742 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 05:54:22.475979 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 05:54:22.476279 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 05:54:22.476571 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 05:54:22.476968 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 05:54:22.477723 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 05:54:22.478025 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 05:54:22.478432 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 05:54:22.478714 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 05:54:22.479020 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 05:54:22.479349 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 05:54:22.479633 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 05:54:22.479912 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 05:54:22.480209 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 05:54:22.480519 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 05:54:22.481176 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 05:54:22.481448 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 05:54:22.481685 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 05:54:22.481947 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 05:54:22.482394 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 05:54:22.482626 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 05:54:22.483107 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 05:54:22.483367 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 05:54:22.484335 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 05:54:22.484700 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 05:54:22.485168 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 05:54:22.485500 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 05:54:22.485861 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 05:54:22.486142 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 05:54:22.489071 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 05:54:22.489469 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 05:54:22.491382 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 05:54:22.491461 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 05:54:22.491472 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 05:54:22.491479 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 05:54:22.492887 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 05:54:22.492914 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 05:54:22.492941 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 05:54:22.492949 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 05:54:22.492960 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 05:54:22.493228 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 05:54:22.493522 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 05:54:22.493801 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 05:54:22.494092 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 05:54:22.494333 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 05:54:22.494614 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 05:54:22.494824 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 05:54:22.495765 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 05:54:22.496053 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 05:54:22.496329 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 05:54:22.496588 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 05:54:22.497027 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 05:54:22.497315 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 05:54:22.497651 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 05:54:22.497996 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 05:54:22.498275 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 05:54:22.498506 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 05:54:22.499629 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 05:54:22.499915 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 05:54:22.500172 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 05:54:22.500453 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 05:54:22.501160 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 05:54:22.501405 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 05:54:22.503411 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 05:54:22.503648 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 05:54:22.503865 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 05:54:22.504167 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 05:54:22.507781 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 05:54:22.508070 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 05:54:22.508451 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 05:54:22.508711 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 05:54:22.509590 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 05:54:22.509867 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 05:54:22.510132 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 05:54:22.510408 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 05:54:22.511130 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 05:54:22.511146 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 05:54:22.511425 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 05:54:22.512103 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 05:54:22.512117 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 05:54:22.512124 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 05:54:22.512859 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 05:54:22.512899 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 05:54:22.513207 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 05:54:22.513465 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 05:54:22.514376 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 05:54:22.514671 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 05:54:22.515098 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 05:54:22.515354 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 05:54:22.515617 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 05:54:22.515839 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 05:54:22.516085 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 05:54:22.518325 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 05:54:22.518400 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 05:54:22.518496 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 05:54:22.518900 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 05:54:22.519335 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 05:54:22.519703 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 05:54:22.520233 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 05:54:22.520725 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 05:54:22.521137 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 05:54:22.521632 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 05:54:22.522023 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 05:54:22.527137 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 05:54:22.527497 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 05:54:22.530827 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 05:54:22.531149 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 05:54:22.531811 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 05:54:22.532092 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 05:54:22.532359 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 05:54:22.532606 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 05:54:22.534633 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 05:54:22.534985 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 05:54:22.535449 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 05:54:22.535700 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 05:54:22.536399 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 05:54:22.536420 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 05:54:22.537702 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 05:54:22.537722 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 05:54:22.538213 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 05:54:22.538694 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 05:54:22.538718 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 05:54:22.538965 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 05:54:22.539705 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 05:54:22.539996 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 05:54:22.540267 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 05:54:22.540492 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 05:54:22.541276 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 05:54:22.541571 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 05:54:22.542579 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 05:54:22.542611 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 05:54:22.543203 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 05:54:22.543218 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 05:54:22.545107 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 05:54:22.545131 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 05:54:22.545853 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 05:54:22.545872 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 05:54:22.546791 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 05:54:22.547060 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 05:54:22.548846 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 05:54:22.549127 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 05:54:22.554083 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 05:54:22.554118 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 05:54:22.554125 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 05:54:22.303305 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 05:54:22.303776 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 05:54:22.770050 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 05:54:22.770146 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 05:54:22.914304 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 05:54:23.250925 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 05:54:23.537827 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 05:54:23.933963 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 05:54:24.056004 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 05:54:24.056360 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 05:54:24.489954 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 05:54:24.490033 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 05:54:25.415912 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 05:54:25.416243 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 05:54:25.568304 | debian-bookworm | Starting galaxy collection install process 2026-06-02 05:54:25.568624 | debian-bookworm | Process install dependency map 2026-06-02 05:54:25.568905 | debian-bookworm | Starting collection install process 2026-06-02 05:54:25.569192 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 05:54:25.569486 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 05:54:25.569774 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 05:54:25.570060 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 05:54:25.570357 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1899zy5eb0lb/tmpv0tworps/osism-commons-0.20260601.0-p1xfd4vv 2026-06-02 05:54:25.570651 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 05:54:25.570926 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 05:54:25.620950 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 05:54:25.621216 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 05:54:25.621916 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 05:54:25.854082 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 05:54:25.854173 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 05:54:26.034370 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 05:54:26.034448 | ubuntu-noble | Process install dependency map 2026-06-02 05:54:26.034780 | ubuntu-noble | Starting collection install process 2026-06-02 05:54:26.035184 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 05:54:26.035628 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 05:54:26.036036 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 05:54:26.036456 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 05:54:26.036839 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-212768k3l0q4/tmpi2q2h58q/osism-commons-0.20260601.0-mkgjq911 2026-06-02 05:54:26.037393 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 05:54:26.037763 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 05:54:26.144412 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 05:54:26.146558 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 05:54:26.146606 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 05:54:26.167905 | debian-bookworm | ok: Runtime: 0:00:06.276976 2026-06-02 05:54:26.285570 | ubuntu-noble | ok: Runtime: 0:00:06.787618 2026-06-02 05:54:26.295106 | 2026-06-02 05:54:26.295255 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 05:54:26.850391 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:54:26.851838 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:54:26.865598 | 2026-06-02 05:54:26.865829 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 05:54:27.607692 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:27.620097 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:27.430625 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:27.439975 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:27.832385 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:27.832960 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:27.852109 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:27.857410 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 05:54:27.857596 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:28.175479 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:28.176143 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:28.199534 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:28.205794 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 05:54:28.205871 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:28.872331 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 05:54:29.152344 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 05:54:29.152386 | debian-bookworm | config file = None 2026-06-02 05:54:29.152400 | debian-bookworm | configured module search path = 2026-06-02 05:54:29.152405 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 05:54:29.152412 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 05:54:29.152416 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 05:54:29.152421 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 05:54:29.152425 | debian-bookworm | jinja version = 3.1.6 2026-06-02 05:54:29.152429 | debian-bookworm | libyaml = True 2026-06-02 05:54:29.152589 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:54:29.152596 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:54:29.152600 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:54:29.152604 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:54:29.152608 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:54:29.152612 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 05:54:29.152616 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:54:29.152620 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 05:54:29.152623 | debian-bookworm | 2026-06-02 05:54:29.152811 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:54:29.152817 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 05:54:29.152821 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:54:29.152825 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 05:54:29.152829 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:54:29.152833 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:54:29.152837 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:54:29.152841 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:54:29.152845 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:54:29.152849 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:54:29.152853 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:54:29.152857 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:54:29.152861 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:54:29.152865 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:54:29.152868 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:54:29.152872 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:29.152876 | debian-bookworm | 2026-06-02 05:54:29.153122 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:29.390193 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 05:54:29.598692 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 05:54:29.599741 | debian-bookworm | 2026-06-02 05:54:29.600177 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 05:54:29.600604 | debian-bookworm | 2026-06-02 05:54:29.600986 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 05:54:29.998559 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 05:54:29.998627 | ubuntu-noble | config file = None 2026-06-02 05:54:29.998646 | ubuntu-noble | configured module search path = 2026-06-02 05:54:29.998653 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 05:54:29.998658 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 05:54:29.998662 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 05:54:29.998666 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 05:54:29.998670 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 05:54:29.998674 | ubuntu-noble | libyaml = True 2026-06-02 05:54:29.999063 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:54:29.999069 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:54:29.999073 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:54:29.999077 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:54:29.999080 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:54:29.999084 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 05:54:29.999087 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:54:29.999091 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 05:54:29.999095 | ubuntu-noble | 2026-06-02 05:54:29.999429 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:54:29.999436 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 05:54:29.999440 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:54:29.999443 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 05:54:29.999447 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:54:29.999450 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:54:29.999454 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:54:29.999458 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:54:29.999461 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:54:29.999465 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:54:29.999469 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:54:29.999472 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:54:29.999476 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:54:29.999479 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:54:29.999483 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:54:29.999486 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:29.999490 | ubuntu-noble | 2026-06-02 05:54:29.999847 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:30.354377 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 05:54:30.648120 | ubuntu-noble | 2026-06-02 05:54:30.648208 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 05:54:30.649711 | ubuntu-noble | 2026-06-02 05:54:30.649858 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 05:54:30.566701 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 05:54:30.566816 | debian-bookworm | 2026-06-02 05:54:30.567174 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 05:54:32.020569 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 05:54:32.020634 | ubuntu-noble | 2026-06-02 05:54:32.022023 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 05:54:34.554485 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:34.554804 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.0 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.0 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:34.554966 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:34.555110 | debian-bookworm | 2026-06-02 05:54:34.555229 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 05:54:34.572515 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 05:54:34.572638 | debian-bookworm | 2026-06-02 05:54:34.572771 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 05:54:34.572906 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 05:54:34.573022 | debian-bookworm | 2026-06-02 05:54:34.631260 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 05:54:34.631637 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 05:54:34.928925 | debian-bookworm | ok: Runtime: 0:00:07.513356 2026-06-02 05:54:37.330695 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.0 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.0 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:37.331303 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.5 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.5 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:37.331479 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 05:54:37.331609 | ubuntu-noble | 2026-06-02 05:54:37.331739 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 05:54:37.360894 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 05:54:37.361392 | ubuntu-noble | 2026-06-02 05:54:37.361742 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 05:54:37.362140 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 05:54:37.362495 | ubuntu-noble | 2026-06-02 05:54:37.632185 | ubuntu-noble | ok: Runtime: 0:00:10.358600 2026-06-02 05:54:37.643081 | 2026-06-02 05:54:37.643246 | TASK [ansible-molecule : Reset connection] 2026-06-02 05:54:37.685765 | 2026-06-02 05:54:37.685964 | TASK [ansible-molecule : Reset connection] 2026-06-02 05:54:37.729737 | 2026-06-02 05:54:37.729948 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 05:54:37.485890 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 05:54:37.486919 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 05:54:38.689502 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:38.706563 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:38.534503 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:38.543612 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:39.264221 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:39.264871 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:38.940345 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:38.940933 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:38.959969 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:38.965194 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 05:54:38.965287 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:39.301632 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:39.308631 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 05:54:39.308745 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:40.009167 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 05:54:40.009489 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 05:54:40.318237 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 05:54:40.318736 | debian-bookworm | config file = None 2026-06-02 05:54:40.319124 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 05:54:40.319651 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 05:54:40.320043 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 05:54:40.320365 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 05:54:40.320703 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 05:54:40.321049 | debian-bookworm | jinja version = 3.1.6 2026-06-02 05:54:40.321341 | debian-bookworm | libyaml = True 2026-06-02 05:54:40.321645 | debian-bookworm | No config file found; using defaults 2026-06-02 05:54:40.322087 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 05:54:40.325219 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 05:54:40.325643 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 05:54:40.326040 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 05:54:40.326407 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 05:54:40.326809 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 05:54:40.327214 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 05:54:40.327690 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 05:54:40.327978 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 05:54:40.328358 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 05:54:40.328703 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 05:54:40.329045 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 05:54:40.329298 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 05:54:40.331219 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 05:54:40.331608 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 05:54:40.331945 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 05:54:40.332281 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 05:54:40.332551 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 05:54:40.332887 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 05:54:40.333530 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 05:54:40.333888 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 05:54:40.334103 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 05:54:40.334377 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 05:54:40.334957 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 05:54:40.335233 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 05:54:40.335562 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 05:54:40.335834 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 05:54:40.336589 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 05:54:40.336863 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 05:54:40.337223 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 05:54:40.337510 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 05:54:40.370898 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 05:54:40.371275 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 05:54:40.372150 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 05:54:40.372607 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 05:54:40.372940 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 05:54:40.373257 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 05:54:40.373742 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 05:54:40.374087 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 05:54:40.374427 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 05:54:40.374765 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 05:54:40.375009 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 05:54:40.375360 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 05:54:40.380163 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 05:54:40.380507 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 05:54:40.381790 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 05:54:40.382124 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 05:54:40.382715 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 05:54:40.383048 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 05:54:40.383430 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 05:54:40.383763 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 05:54:40.384052 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 05:54:40.384318 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 05:54:40.392110 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 05:54:40.392408 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 05:54:40.392731 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 05:54:40.393023 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 05:54:40.393317 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 05:54:40.393631 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 05:54:40.394283 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 05:54:40.394595 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 05:54:40.394894 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 05:54:40.395189 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 05:54:40.395539 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 05:54:40.395842 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 05:54:40.396134 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 05:54:40.396436 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 05:54:40.398119 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 05:54:40.398384 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 05:54:40.398990 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 05:54:40.399270 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 05:54:40.399594 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 05:54:40.399871 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 05:54:40.401038 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 05:54:40.401307 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 05:54:40.401594 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 05:54:40.401861 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 05:54:40.402381 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 05:54:40.402665 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 05:54:40.402958 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 05:54:40.403231 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 05:54:40.403568 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 05:54:40.403844 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 05:54:40.404083 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 05:54:40.404307 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 05:54:40.404728 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 05:54:40.404956 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 05:54:40.407277 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 05:54:40.407552 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 05:54:40.407839 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 05:54:40.408067 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 05:54:40.408294 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 05:54:40.408534 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 05:54:40.408830 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 05:54:40.409063 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 05:54:40.409295 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 05:54:40.409541 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 05:54:40.409848 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 05:54:40.410079 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 05:54:40.410808 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 05:54:40.411020 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 05:54:40.411434 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 05:54:40.411659 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 05:54:40.412721 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 05:54:40.412928 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 05:54:40.413220 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 05:54:40.413427 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 05:54:40.414168 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 05:54:40.414376 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 05:54:40.414601 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 05:54:40.415424 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 05:54:40.415922 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 05:54:40.416222 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 05:54:40.419047 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 05:54:40.419466 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 05:54:40.420811 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 05:54:40.421192 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 05:54:40.421627 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 05:54:40.421916 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 05:54:40.422313 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 05:54:40.422678 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 05:54:40.423033 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 05:54:40.423316 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 05:54:40.423795 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 05:54:40.424075 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 05:54:40.424354 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 05:54:40.424650 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 05:54:40.425290 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 05:54:40.425654 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 05:54:40.426295 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 05:54:40.426650 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 05:54:40.426997 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 05:54:40.427295 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 05:54:40.427661 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 05:54:40.427913 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 05:54:40.428152 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 05:54:40.428506 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 05:54:40.428734 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 05:54:40.428978 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 05:54:40.429303 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 05:54:40.429600 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 05:54:40.429845 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 05:54:40.430131 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 05:54:40.430333 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 05:54:40.430547 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 05:54:40.430813 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 05:54:40.431013 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 05:54:40.431632 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 05:54:40.432035 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 05:54:40.432401 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 05:54:40.432643 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 05:54:40.432925 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 05:54:40.433130 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 05:54:40.433325 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 05:54:40.433607 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 05:54:40.433807 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 05:54:40.434006 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 05:54:40.436626 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 05:54:40.436836 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 05:54:40.437101 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 05:54:40.437313 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 05:54:40.437566 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 05:54:40.437840 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 05:54:40.439504 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 05:54:40.439720 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 05:54:40.440124 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 05:54:40.440337 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 05:54:40.441307 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 05:54:40.441562 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 05:54:40.442030 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 05:54:40.442239 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 05:54:40.442446 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 05:54:40.442679 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 05:54:40.442926 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 05:54:40.443140 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 05:54:40.444953 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 05:54:40.445231 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 05:54:40.445636 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 05:54:40.445900 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 05:54:40.446146 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 05:54:40.446386 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 05:54:40.446641 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 05:54:40.446855 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 05:54:40.447066 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 05:54:40.447273 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 05:54:40.447540 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 05:54:40.447757 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 05:54:40.447970 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 05:54:40.448180 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 05:54:40.448393 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 05:54:40.448638 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 05:54:40.449086 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 05:54:40.449301 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 05:54:40.449656 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 05:54:40.449865 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 05:54:40.450436 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 05:54:40.450667 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 05:54:40.454799 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 05:54:40.456322 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 05:54:40.457518 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 05:54:40.457789 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 05:54:40.458198 | debian-bookworm | Starting galaxy collection install process 2026-06-02 05:54:40.458367 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 05:54:40.503077 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 05:54:40.503195 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 05:54:40.519754 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 05:54:40.522155 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 05:54:40.530875 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 05:54:40.530959 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 05:54:40.531048 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 05:54:40.538365 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 05:54:40.817019 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 05:54:40.817655 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 05:54:41.232324 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 05:54:41.232376 | ubuntu-noble | config file = None 2026-06-02 05:54:41.232385 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 05:54:41.232391 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 05:54:41.232572 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 05:54:41.232973 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 05:54:41.233361 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 05:54:41.233653 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 05:54:41.233938 | ubuntu-noble | libyaml = True 2026-06-02 05:54:41.234259 | ubuntu-noble | No config file found; using defaults 2026-06-02 05:54:41.234770 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 05:54:41.245395 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 05:54:41.245813 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 05:54:41.246142 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 05:54:41.247773 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 05:54:41.259541 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 05:54:41.260006 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 05:54:41.260484 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 05:54:41.260894 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 05:54:41.261766 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 05:54:41.266688 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 05:54:41.267472 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 05:54:41.267819 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 05:54:41.268166 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 05:54:40.814775 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 05:54:40.814817 | debian-bookworm | config file = None 2026-06-02 05:54:40.814823 | debian-bookworm | configured module search path = 2026-06-02 05:54:40.814827 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 05:54:40.814832 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 05:54:40.814836 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 05:54:40.814840 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 05:54:40.814844 | debian-bookworm | jinja version = 3.1.6 2026-06-02 05:54:40.814848 | debian-bookworm | libyaml = True 2026-06-02 05:54:40.815016 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:54:40.815022 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:54:40.815026 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:54:40.815030 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:54:40.815034 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:54:40.815038 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 05:54:40.815042 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:54:40.815046 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 05:54:40.815050 | debian-bookworm | 2026-06-02 05:54:40.815238 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:54:40.815244 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 05:54:40.815248 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:54:40.815261 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 05:54:40.815265 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:54:40.815269 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:54:40.815275 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:54:40.815279 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:54:40.815283 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:54:40.815287 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:54:40.815296 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:54:40.815300 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:54:40.815304 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:54:40.815308 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:54:40.815312 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:54:40.815315 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:40.815320 | debian-bookworm | 2026-06-02 05:54:40.815616 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:41.050572 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 05:54:41.247297 | debian-bookworm | 2026-06-02 05:54:41.247730 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 05:54:41.248005 | debian-bookworm | 2026-06-02 05:54:41.248296 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 05:54:41.274646 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 05:54:41.274988 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 05:54:41.275478 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 05:54:41.275720 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 05:54:41.275969 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 05:54:41.276234 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 05:54:41.276645 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 05:54:41.276860 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 05:54:41.277114 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 05:54:41.277338 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 05:54:41.277531 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 05:54:41.277714 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 05:54:41.277897 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 05:54:41.278133 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 05:54:41.278394 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 05:54:41.278594 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 05:54:41.278765 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 05:54:41.278934 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 05:54:41.279143 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 05:54:41.279337 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 05:54:41.279506 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 05:54:41.279745 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 05:54:41.280010 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 05:54:41.302471 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 05:54:41.302817 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 05:54:41.303792 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 05:54:41.304219 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 05:54:41.304661 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 05:54:41.305102 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 05:54:41.306212 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 05:54:41.306541 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 05:54:41.307364 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 05:54:41.308282 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 05:54:41.308495 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 05:54:41.308808 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 05:54:41.309138 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 05:54:41.309461 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 05:54:41.310308 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 05:54:41.310632 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 05:54:41.311186 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 05:54:41.311530 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 05:54:41.313388 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 05:54:41.313792 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 05:54:41.314382 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 05:54:41.314621 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 05:54:41.315828 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 05:54:41.316756 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 05:54:41.317226 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 05:54:41.317607 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 05:54:41.319285 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 05:54:41.319307 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 05:54:41.319312 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 05:54:41.319316 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 05:54:41.319321 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 05:54:41.319324 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 05:54:41.319533 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 05:54:41.319736 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 05:54:41.320045 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 05:54:41.320264 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 05:54:41.321105 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 05:54:41.321384 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 05:54:41.321634 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 05:54:41.322045 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 05:54:41.322458 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 05:54:41.322837 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 05:54:41.323142 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 05:54:41.323415 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 05:54:41.323796 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 05:54:41.324079 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 05:54:41.324413 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 05:54:41.324756 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 05:54:41.325230 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 05:54:41.325568 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 05:54:41.325796 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 05:54:41.326067 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 05:54:41.327297 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 05:54:41.327913 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 05:54:41.328213 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 05:54:41.328497 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 05:54:41.330882 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 05:54:41.331233 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 05:54:41.331582 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 05:54:41.331891 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 05:54:41.332262 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 05:54:41.332583 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 05:54:41.332896 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 05:54:41.333240 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 05:54:41.333581 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 05:54:41.333886 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 05:54:41.334506 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 05:54:41.335281 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 05:54:41.335301 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 05:54:41.335463 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 05:54:41.376881 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 05:54:41.377339 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 05:54:41.378092 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 05:54:41.378494 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 05:54:41.378841 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 05:54:41.379213 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 05:54:41.379840 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 05:54:41.380288 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 05:54:41.382340 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 05:54:41.383379 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 05:54:41.387293 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 05:54:41.387334 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 05:54:41.387345 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 05:54:41.387353 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 05:54:41.387536 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 05:54:41.387878 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 05:54:41.388222 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 05:54:41.388565 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 05:54:41.389222 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 05:54:41.389521 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 05:54:41.389796 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 05:54:41.390085 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 05:54:41.390325 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 05:54:41.390608 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 05:54:41.392085 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 05:54:41.392497 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 05:54:41.394384 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 05:54:41.394674 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 05:54:41.394946 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 05:54:41.395241 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 05:54:41.395546 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 05:54:41.395816 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 05:54:41.396106 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 05:54:41.396393 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 05:54:41.396724 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 05:54:41.397080 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 05:54:41.397331 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 05:54:41.397578 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 05:54:41.397819 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 05:54:41.398016 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 05:54:41.400610 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 05:54:41.400643 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 05:54:41.400900 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 05:54:41.401174 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 05:54:41.401449 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 05:54:41.401708 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 05:54:41.401958 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 05:54:41.402202 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 05:54:41.403152 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 05:54:41.403427 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 05:54:41.403892 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 05:54:41.403906 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 05:54:41.410099 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 05:54:41.410456 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 05:54:41.411229 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 05:54:41.411273 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 05:54:41.414014 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 05:54:41.414060 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 05:54:41.414068 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 05:54:41.414092 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 05:54:41.414099 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 05:54:41.414106 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 05:54:41.415455 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 05:54:41.415487 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 05:54:41.415495 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 05:54:41.415501 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 05:54:41.418358 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 05:54:41.418380 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 05:54:41.419665 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 05:54:41.419686 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 05:54:41.420200 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 05:54:41.420214 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 05:54:41.421098 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 05:54:41.421120 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 05:54:41.421392 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 05:54:41.421651 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 05:54:41.421896 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 05:54:41.422172 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 05:54:41.422490 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 05:54:41.422747 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 05:54:41.423171 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 05:54:41.423436 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 05:54:41.423872 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 05:54:41.423884 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 05:54:41.424721 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 05:54:41.424766 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 05:54:41.424983 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 05:54:41.425279 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 05:54:41.425633 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 05:54:41.425840 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 05:54:41.426691 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 05:54:41.426963 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 05:54:41.436777 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 05:54:41.437099 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 05:54:41.438165 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 05:54:41.438189 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 05:54:41.548312 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 05:54:41.548373 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 05:54:41.561393 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 05:54:41.564580 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 05:54:41.575074 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 05:54:41.575243 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 05:54:41.575421 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 05:54:41.584139 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 05:54:42.012366 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 05:54:42.012447 | ubuntu-noble | config file = None 2026-06-02 05:54:42.012462 | ubuntu-noble | configured module search path = 2026-06-02 05:54:42.012472 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 05:54:42.012484 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 05:54:42.012494 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 05:54:42.012504 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 05:54:42.012514 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 05:54:42.012524 | ubuntu-noble | libyaml = True 2026-06-02 05:54:42.013063 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:54:42.013087 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:54:42.013098 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:54:42.013109 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:54:42.013120 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:54:42.013131 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 05:54:42.013142 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:54:42.013153 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 05:54:42.013167 | ubuntu-noble | 2026-06-02 05:54:42.013498 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:54:42.013525 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 05:54:42.013538 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:54:42.013579 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 05:54:42.013590 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:54:42.013602 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:54:42.013613 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:54:42.013623 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:54:42.013634 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:54:42.013645 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:54:42.013656 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:54:42.013666 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:54:42.013677 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:54:42.013709 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:54:42.013720 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:54:42.013731 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:42.013744 | ubuntu-noble | 2026-06-02 05:54:42.014169 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:54:42.259717 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 05:54:42.259826 | debian-bookworm | 2026-06-02 05:54:42.259951 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 05:54:42.420120 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 05:54:42.671176 | ubuntu-noble | 2026-06-02 05:54:42.671777 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 05:54:42.673349 | ubuntu-noble | 2026-06-02 05:54:42.673399 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 05:54:42.291321 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 05:54:42.291722 | debian-bookworm | 2026-06-02 05:54:42.292034 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 05:54:42.326833 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 05:54:42.327121 | debian-bookworm | 2026-06-02 05:54:42.327506 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 05:54:42.350403 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 05:54:42.350700 | debian-bookworm | 2026-06-02 05:54:42.350986 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 05:54:44.039378 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 05:54:44.039464 | ubuntu-noble | 2026-06-02 05:54:44.039476 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 05:54:44.076140 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 05:54:44.076202 | ubuntu-noble | 2026-06-02 05:54:44.076213 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 05:54:44.155359 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 05:54:44.155444 | ubuntu-noble | 2026-06-02 05:54:44.155708 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 05:54:44.193228 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 05:54:44.193371 | ubuntu-noble | 2026-06-02 05:54:44.193383 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 05:54:45.711150 | debian-bookworm | The following additional packages will be installed: 2026-06-02 05:54:45.711210 | debian-bookworm | libauparse0 2026-06-02 05:54:45.711231 | debian-bookworm | Suggested packages: 2026-06-02 05:54:45.711312 | debian-bookworm | audispd-plugins 2026-06-02 05:54:45.711516 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 05:54:45.711675 | debian-bookworm | auditd libauparse0 2026-06-02 05:54:45.711835 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 05:54:45.713098 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780379583, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3848 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3848 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 05:54:45.713159 | debian-bookworm | 2026-06-02 05:54:45.713325 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 05:54:47.901536 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 05:54:47.901708 | debian-bookworm | audispd-plugins 2026-06-02 05:54:47.901875 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 05:54:47.902086 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780379583, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (1036 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (1036 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 05:54:47.902233 | debian-bookworm | 2026-06-02 05:54:47.902395 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 05:54:48.611716 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 05:54:48.611766 | ubuntu-noble | libauparse0t64 2026-06-02 05:54:48.611777 | ubuntu-noble | Suggested packages: 2026-06-02 05:54:48.611786 | ubuntu-noble | audispd-plugins 2026-06-02 05:54:48.611801 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 05:54:48.612017 | ubuntu-noble | auditd libauparse0t64 2026-06-02 05:54:48.613294 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 05:54:48.616697 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780379585, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (3297 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (3297 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 05:54:48.616841 | ubuntu-noble | 2026-06-02 05:54:48.617058 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 05:54:48.894646 | debian-bookworm | --- before 2026-06-02 05:54:48.894749 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-21553x_4kkhl/tmpyql5c2hm/auditd.conf.j2 2026-06-02 05:54:48.894761 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 05:54:48.894778 | debian-bookworm | +# 2026-06-02 05:54:48.894791 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 05:54:48.894907 | debian-bookworm | +# 2026-06-02 05:54:48.894995 | debian-bookworm | + 2026-06-02 05:54:48.895088 | debian-bookworm | +local_events = yes 2026-06-02 05:54:48.895190 | debian-bookworm | +write_logs = yes 2026-06-02 05:54:48.895278 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 05:54:48.895405 | debian-bookworm | +log_group = adm 2026-06-02 05:54:48.895510 | debian-bookworm | +log_format = RAW 2026-06-02 05:54:48.895604 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 05:54:48.895696 | debian-bookworm | +freq = 50 2026-06-02 05:54:48.895791 | debian-bookworm | +max_log_file = 8 2026-06-02 05:54:48.895885 | debian-bookworm | +num_logs = 5 2026-06-02 05:54:48.895976 | debian-bookworm | +priority_boost = 4 2026-06-02 05:54:48.896068 | debian-bookworm | +disp_qos = lossy 2026-06-02 05:54:48.896316 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 05:54:48.896424 | debian-bookworm | +name_format = NONE 2026-06-02 05:54:48.896530 | debian-bookworm | +##name = mydomain 2026-06-02 05:54:48.896628 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 05:54:48.896724 | debian-bookworm | +space_left = 12361 2026-06-02 05:54:48.896820 | debian-bookworm | +space_left_action = email 2026-06-02 05:54:48.896912 | debian-bookworm | +verify_email = yes 2026-06-02 05:54:48.897005 | debian-bookworm | +action_mail_acct = root 2026-06-02 05:54:48.897099 | debian-bookworm | +admin_space_left = 50 2026-06-02 05:54:48.897196 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 05:54:48.897299 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 05:54:48.897393 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 05:54:48.897504 | debian-bookworm | +use_libwrap = yes 2026-06-02 05:54:48.897603 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 05:54:48.897697 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 05:54:48.897792 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 05:54:48.897890 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 05:54:48.897987 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 05:54:48.898078 | debian-bookworm | +enable_krb5 = no 2026-06-02 05:54:48.898172 | debian-bookworm | +krb5_principal = auditd 2026-06-02 05:54:48.898268 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 05:54:48.898361 | debian-bookworm | +distribute_network = no 2026-06-02 05:54:48.898450 | debian-bookworm | 2026-06-02 05:54:48.898577 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780379687.917466-2525-18377859828768/.source.conf", "state": "file", "uid": 0} 2026-06-02 05:54:48.898653 | debian-bookworm | 2026-06-02 05:54:48.898753 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 05:54:49.252175 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 05:54:49.252220 | debian-bookworm | 2026-06-02 05:54:49.252234 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 05:54:49.949503 | debian-bookworm | --- before 2026-06-02 05:54:49.949600 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-21553x_4kkhl/tmpy74qhxmw/20-neo23x0.rules.j2 2026-06-02 05:54:49.949706 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 05:54:49.949797 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 05:54:49.949892 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 05:54:49.949990 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 05:54:49.950083 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 05:54:49.950190 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 05:54:49.950287 | debian-bookworm | +# 2026-06-02 05:54:49.950447 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 05:54:49.950522 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 05:54:49.950651 | debian-bookworm | +# 2026-06-02 05:54:49.950761 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 05:54:49.950783 | debian-bookworm | +# 2026-06-02 05:54:49.950886 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 05:54:49.951012 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 05:54:49.951091 | debian-bookworm | +# 2026-06-02 05:54:49.951194 | debian-bookworm | +# Based on rules published here: 2026-06-02 05:54:49.951272 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 05:54:49.951609 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 05:54:49.951840 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 05:54:49.951941 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 05:54:49.952051 | debian-bookworm | +# Linux audit repo 2026-06-02 05:54:49.952218 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 05:54:49.952577 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 05:54:49.953596 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 05:54:49.955759 | debian-bookworm | +# 2026-06-02 05:54:49.956150 | debian-bookworm | +# Further rules 2026-06-02 05:54:49.956630 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 05:54:49.957098 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 05:54:49.957526 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 05:54:49.957942 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 05:54:49.958227 | debian-bookworm | + 2026-06-02 05:54:49.958578 | debian-bookworm | +# Remove any existing rules 2026-06-02 05:54:49.958907 | debian-bookworm | +-D 2026-06-02 05:54:49.959192 | debian-bookworm | + 2026-06-02 05:54:49.959543 | debian-bookworm | +# Buffer Size 2026-06-02 05:54:49.959844 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 05:54:49.960125 | debian-bookworm | +-b 8192 2026-06-02 05:54:49.960400 | debian-bookworm | + 2026-06-02 05:54:49.960705 | debian-bookworm | +# Failure Mode 2026-06-02 05:54:49.960997 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 05:54:49.961278 | debian-bookworm | +-f 1 2026-06-02 05:54:49.961571 | debian-bookworm | + 2026-06-02 05:54:49.961851 | debian-bookworm | +# Ignore errors 2026-06-02 05:54:49.962145 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 05:54:49.962426 | debian-bookworm | +-i 2026-06-02 05:54:49.962759 | debian-bookworm | + 2026-06-02 05:54:49.963050 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 05:54:49.963328 | debian-bookworm | + 2026-06-02 05:54:49.963683 | debian-bookworm | +## Audit the audit logs 2026-06-02 05:54:49.963979 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 05:54:49.964264 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 05:54:49.964564 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 05:54:49.964841 | debian-bookworm | + 2026-06-02 05:54:49.965125 | debian-bookworm | +## Auditd configuration 2026-06-02 05:54:49.965409 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 05:54:49.965726 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 05:54:49.966030 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 05:54:49.966313 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 05:54:49.966639 | debian-bookworm | + 2026-06-02 05:54:49.966927 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 05:54:49.967169 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 05:54:49.967439 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 05:54:49.967696 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 05:54:49.967927 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 05:54:49.968152 | debian-bookworm | + 2026-06-02 05:54:49.968386 | debian-bookworm | +## Access to all audit trails 2026-06-02 05:54:49.968655 | debian-bookworm | + 2026-06-02 05:54:49.968877 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 05:54:49.969075 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 05:54:49.969274 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 05:54:49.969481 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 05:54:49.969681 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 05:54:49.969871 | debian-bookworm | + 2026-06-02 05:54:49.970063 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 05:54:49.970251 | debian-bookworm | + 2026-06-02 05:54:49.970465 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 05:54:49.970672 | debian-bookworm | + 2026-06-02 05:54:49.970869 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 05:54:49.971069 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 05:54:49.971261 | debian-bookworm | + 2026-06-02 05:54:49.971532 | debian-bookworm | +## Ignore current working directory records 2026-06-02 05:54:49.971741 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 05:54:49.971928 | debian-bookworm | + 2026-06-02 05:54:49.972124 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 05:54:49.972309 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 05:54:49.972506 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 05:54:49.972687 | debian-bookworm | + 2026-06-02 05:54:49.972870 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 05:54:49.973056 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 05:54:49.973233 | debian-bookworm | + 2026-06-02 05:54:49.973420 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 05:54:49.973632 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 05:54:49.973815 | debian-bookworm | + 2026-06-02 05:54:49.973997 | debian-bookworm | +## Open VM Tools 2026-06-02 05:54:49.974183 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 05:54:49.974357 | debian-bookworm | + 2026-06-02 05:54:49.974556 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 05:54:49.974743 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 05:54:49.974929 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 05:54:49.975107 | debian-bookworm | + 2026-06-02 05:54:49.975288 | debian-bookworm | +## FileBeat 2026-06-02 05:54:49.975530 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 05:54:49.975718 | debian-bookworm | + 2026-06-02 05:54:49.975896 | debian-bookworm | +## More information on how to filter events 2026-06-02 05:54:49.976064 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 05:54:49.976221 | debian-bookworm | + 2026-06-02 05:54:49.976380 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 05:54:49.976548 | debian-bookworm | + 2026-06-02 05:54:49.976706 | debian-bookworm | +## Kernel parameters 2026-06-02 05:54:49.976867 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 05:54:49.977025 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 05:54:49.977180 | debian-bookworm | + 2026-06-02 05:54:49.977338 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 05:54:49.977510 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 05:54:49.977671 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 05:54:49.977831 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 05:54:49.977990 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 05:54:49.978142 | debian-bookworm | + 2026-06-02 05:54:49.978299 | debian-bookworm | +## Modprobe configuration 2026-06-02 05:54:49.978457 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 05:54:49.978654 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 05:54:49.978808 | debian-bookworm | + 2026-06-02 05:54:49.978966 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 05:54:49.979109 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 05:54:49.979249 | debian-bookworm | + 2026-06-02 05:54:49.979416 | debian-bookworm | +## Special files 2026-06-02 05:54:49.979576 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 05:54:49.979714 | debian-bookworm | + 2026-06-02 05:54:49.979858 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 05:54:49.980004 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 05:54:49.980141 | debian-bookworm | + 2026-06-02 05:54:49.980284 | debian-bookworm | +### NFS mount 2026-06-02 05:54:49.980439 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:49.980605 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:49.980742 | debian-bookworm | + 2026-06-02 05:54:49.980880 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 05:54:49.981025 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 05:54:49.981169 | debian-bookworm | + 2026-06-02 05:54:49.981311 | debian-bookworm | +## Time 2026-06-02 05:54:49.981509 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 05:54:49.981714 | debian-bookworm | +### Local time zone 2026-06-02 05:54:49.981872 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 05:54:49.982014 | debian-bookworm | + 2026-06-02 05:54:49.982198 | debian-bookworm | +## Stunnel 2026-06-02 05:54:49.982356 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 05:54:49.982508 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 05:54:49.982640 | debian-bookworm | + 2026-06-02 05:54:49.982773 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 05:54:49.982905 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 05:54:49.983036 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 05:54:49.983169 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 05:54:49.983304 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 05:54:49.983460 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 05:54:49.983609 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 05:54:49.983741 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 05:54:49.983875 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 05:54:49.984008 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 05:54:49.984139 | debian-bookworm | + 2026-06-02 05:54:49.984313 | debian-bookworm | +## User, group, password databases 2026-06-02 05:54:49.984504 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 05:54:49.984651 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 05:54:49.984790 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 05:54:49.984924 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 05:54:49.985062 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 05:54:49.985194 | debian-bookworm | + 2026-06-02 05:54:49.985349 | debian-bookworm | +## Sudoers file changes 2026-06-02 05:54:49.985522 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 05:54:49.985661 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 05:54:49.985792 | debian-bookworm | + 2026-06-02 05:54:49.985924 | debian-bookworm | +## Passwd 2026-06-02 05:54:49.986059 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 05:54:49.986188 | debian-bookworm | + 2026-06-02 05:54:49.986316 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 05:54:49.986495 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 05:54:49.986641 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 05:54:49.986769 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 05:54:49.986891 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 05:54:49.987012 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 05:54:49.987133 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 05:54:49.987254 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 05:54:49.987410 | debian-bookworm | + 2026-06-02 05:54:49.987571 | debian-bookworm | +## Login configuration and information 2026-06-02 05:54:49.987721 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 05:54:49.987847 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 05:54:49.987968 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 05:54:49.988088 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 05:54:49.988209 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 05:54:49.988329 | debian-bookworm | + 2026-06-02 05:54:49.988458 | debian-bookworm | +## Network Environment 2026-06-02 05:54:49.988611 | debian-bookworm | +### Changes to hostname 2026-06-02 05:54:49.988737 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 05:54:49.988846 | debian-bookworm | + 2026-06-02 05:54:49.988956 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 05:54:49.989070 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 05:54:49.989180 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 05:54:49.989287 | debian-bookworm | + 2026-06-02 05:54:49.989399 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 05:54:49.989523 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 05:54:49.989630 | debian-bookworm | + 2026-06-02 05:54:49.989739 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 05:54:49.989853 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 05:54:49.989959 | debian-bookworm | + 2026-06-02 05:54:49.990077 | debian-bookworm | +### Changes to other files 2026-06-02 05:54:49.990188 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 05:54:49.990299 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 05:54:49.990410 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 05:54:49.990531 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 05:54:49.990647 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 05:54:49.990754 | debian-bookworm | + 2026-06-02 05:54:49.990865 | debian-bookworm | +### Changes to issue 2026-06-02 05:54:49.990976 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 05:54:49.991087 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 05:54:49.991194 | debian-bookworm | + 2026-06-02 05:54:49.991306 | debian-bookworm | +## System startup scripts 2026-06-02 05:54:49.991448 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 05:54:49.991593 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 05:54:49.991707 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 05:54:49.991817 | debian-bookworm | + 2026-06-02 05:54:49.991927 | debian-bookworm | +## Library search paths 2026-06-02 05:54:49.992037 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 05:54:49.992147 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 05:54:49.992251 | debian-bookworm | + 2026-06-02 05:54:49.992361 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 05:54:49.992479 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 05:54:49.992587 | debian-bookworm | + 2026-06-02 05:54:49.992697 | debian-bookworm | +## Pam configuration 2026-06-02 05:54:49.992806 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 05:54:49.992917 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 05:54:49.993026 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 05:54:49.993135 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 05:54:49.993244 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 05:54:49.993352 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 05:54:49.993462 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 05:54:49.993595 | debian-bookworm | + 2026-06-02 05:54:49.993707 | debian-bookworm | +## Mail configuration 2026-06-02 05:54:49.993819 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 05:54:49.993932 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 05:54:49.994042 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 05:54:49.994151 | debian-bookworm | + 2026-06-02 05:54:49.994260 | debian-bookworm | +## SSH configuration 2026-06-02 05:54:49.994370 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 05:54:49.994490 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 05:54:49.994601 | debian-bookworm | + 2026-06-02 05:54:49.994712 | debian-bookworm | +## root ssh key tampering 2026-06-02 05:54:49.994824 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 05:54:49.994933 | debian-bookworm | + 2026-06-02 05:54:49.995044 | debian-bookworm | +# Systemd 2026-06-02 05:54:49.995156 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 05:54:49.995265 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 05:54:49.995396 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 05:54:49.995516 | debian-bookworm | + 2026-06-02 05:54:49.995630 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 05:54:49.995743 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:49.995856 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:49.995968 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 05:54:49.996077 | debian-bookworm | + 2026-06-02 05:54:49.996190 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 05:54:49.996304 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 05:54:49.996417 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:49.996572 | debian-bookworm | + 2026-06-02 05:54:49.996693 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 05:54:49.996809 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 05:54:49.996918 | debian-bookworm | + 2026-06-02 05:54:49.997031 | debian-bookworm | +## Critical elements access failures 2026-06-02 05:54:49.997146 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997265 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997379 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997512 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997627 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997742 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997855 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.997968 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 05:54:49.998075 | debian-bookworm | + 2026-06-02 05:54:49.998188 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 05:54:49.998299 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 05:54:49.998408 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 05:54:49.998527 | debian-bookworm | + 2026-06-02 05:54:49.998640 | debian-bookworm | +## Power state 2026-06-02 05:54:49.998750 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 05:54:49.998862 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 05:54:49.998973 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 05:54:49.999083 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 05:54:49.999192 | debian-bookworm | + 2026-06-02 05:54:49.999303 | debian-bookworm | +## Session initiation information 2026-06-02 05:54:49.999436 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 05:54:49.999578 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 05:54:49.999691 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 05:54:49.999807 | debian-bookworm | + 2026-06-02 05:54:49.999921 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 05:54:50.000035 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000149 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000261 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000371 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000495 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000612 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000725 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000838 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.000950 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.001062 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.001174 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.001287 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.001402 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:50.001600 | debian-bookworm | + 2026-06-02 05:54:50.001719 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 05:54:50.001829 | debian-bookworm | + 2026-06-02 05:54:50.001939 | debian-bookworm | +## Reconnaissance 2026-06-02 05:54:50.002050 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 05:54:50.002160 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 05:54:50.002271 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 05:54:50.002381 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 05:54:50.002502 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 05:54:50.002613 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 05:54:50.002718 | debian-bookworm | + 2026-06-02 05:54:50.002829 | debian-bookworm | +## Suspicious activity 2026-06-02 05:54:50.002939 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 05:54:50.003050 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 05:54:50.003161 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 05:54:50.003272 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 05:54:50.003399 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 05:54:50.003523 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 05:54:50.003635 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 05:54:50.003751 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 05:54:50.003861 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 05:54:50.003971 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 05:54:50.004079 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 05:54:50.004189 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 05:54:50.004297 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 05:54:50.004410 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 05:54:50.004548 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 05:54:50.004661 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 05:54:50.004773 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 05:54:50.004885 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 05:54:50.004996 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 05:54:50.005107 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 05:54:50.005218 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 05:54:50.005330 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 05:54:50.005438 | debian-bookworm | + 2026-06-02 05:54:50.005556 | debian-bookworm | +## sssd 2026-06-02 05:54:50.005676 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.005793 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.005909 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.006023 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.006138 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.006245 | debian-bookworm | + 2026-06-02 05:54:50.006353 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 05:54:50.006458 | debian-bookworm | + 2026-06-02 05:54:50.006592 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 05:54:50.006704 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 05:54:50.006814 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 05:54:50.006923 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 05:54:50.007029 | debian-bookworm | + 2026-06-02 05:54:50.007138 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 05:54:50.007250 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 05:54:50.007371 | debian-bookworm | + 2026-06-02 05:54:50.007507 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 05:54:50.007622 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 05:54:50.007731 | debian-bookworm | + 2026-06-02 05:54:50.007842 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 05:54:50.007951 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 05:54:50.008059 | debian-bookworm | + 2026-06-02 05:54:50.008171 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 05:54:50.008283 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 05:54:50.008391 | debian-bookworm | + 2026-06-02 05:54:50.008510 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 05:54:50.008624 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 05:54:50.008731 | debian-bookworm | + 2026-06-02 05:54:50.008841 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 05:54:50.008957 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 05:54:50.009064 | debian-bookworm | + 2026-06-02 05:54:50.009172 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 05:54:50.009284 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 05:54:50.009391 | debian-bookworm | + 2026-06-02 05:54:50.009514 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 05:54:50.009626 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 05:54:50.009737 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 05:54:50.009847 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 05:54:50.009952 | debian-bookworm | + 2026-06-02 05:54:50.010065 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 05:54:50.010176 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 05:54:50.010292 | debian-bookworm | + 2026-06-02 05:54:50.010403 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 05:54:50.010537 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 05:54:50.010651 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 05:54:50.010758 | debian-bookworm | + 2026-06-02 05:54:50.010868 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 05:54:50.010980 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 05:54:50.011090 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 05:54:50.011200 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 05:54:50.011310 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 05:54:50.011444 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 05:54:50.011573 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 05:54:50.011684 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 05:54:50.011796 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 05:54:50.011906 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 05:54:50.012014 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 05:54:50.012120 | debian-bookworm | + 2026-06-02 05:54:50.012229 | debian-bookworm | +### kde4 2026-06-02 05:54:50.012345 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.012458 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:50.012574 | debian-bookworm | + 2026-06-02 05:54:50.012684 | debian-bookworm | +## dbus-send invocation 2026-06-02 05:54:50.012798 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 05:54:50.012907 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 05:54:50.013016 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 05:54:50.013122 | debian-bookworm | + 2026-06-02 05:54:50.013230 | debian-bookworm | +## pkexec invocation 2026-06-02 05:54:50.013342 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 05:54:50.013450 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 05:54:50.013563 | debian-bookworm | + 2026-06-02 05:54:50.013672 | debian-bookworm | +## Suspicious shells 2026-06-02 05:54:50.013782 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 05:54:50.013892 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 05:54:50.014002 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 05:54:50.014113 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 05:54:50.014222 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 05:54:50.014332 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 05:54:50.014441 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 05:54:50.014575 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 05:54:50.014687 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 05:54:50.014794 | debian-bookworm | + 2026-06-02 05:54:50.014904 | debian-bookworm | +# Web Server Actvity 2026-06-02 05:54:50.015019 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 05:54:50.015133 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 05:54:50.015239 | debian-bookworm | + 2026-06-02 05:54:50.015365 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 05:54:50.015488 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 05:54:50.015602 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 05:54:50.015713 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 05:54:50.015821 | debian-bookworm | + 2026-06-02 05:54:50.015931 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 05:54:50.016039 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 05:54:50.016149 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 05:54:50.016255 | debian-bookworm | + 2026-06-02 05:54:50.016369 | debian-bookworm | +## Shell/profile configurations 2026-06-02 05:54:50.016489 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 05:54:50.016599 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 05:54:50.016710 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 05:54:50.016821 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 05:54:50.016930 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 05:54:50.017042 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 05:54:50.017153 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 05:54:50.017262 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 05:54:50.017375 | debian-bookworm | + 2026-06-02 05:54:50.017513 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 05:54:50.017631 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 05:54:50.017739 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 05:54:50.017849 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 05:54:50.017957 | debian-bookworm | + 2026-06-02 05:54:50.018067 | debian-bookworm | +## Injection 2026-06-02 05:54:50.018180 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 05:54:50.018292 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 05:54:50.018404 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 05:54:50.018524 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 05:54:50.018636 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 05:54:50.018746 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 05:54:50.018853 | debian-bookworm | + 2026-06-02 05:54:50.018963 | debian-bookworm | +## Anonymous File Creation 2026-06-02 05:54:50.019073 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 05:54:50.019185 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 05:54:50.019307 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 05:54:50.019444 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 05:54:50.019577 | debian-bookworm | + 2026-06-02 05:54:50.019692 | debian-bookworm | +## Privilege Abuse 2026-06-02 05:54:50.019806 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 05:54:50.019926 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 05:54:50.020039 | debian-bookworm | + 2026-06-02 05:54:50.020149 | debian-bookworm | +# Socket Creations 2026-06-02 05:54:50.020258 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 05:54:50.020367 | debian-bookworm | + 2026-06-02 05:54:50.020491 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 05:54:50.020607 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 05:54:50.020714 | debian-bookworm | + 2026-06-02 05:54:50.020824 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 05:54:50.020933 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 05:54:50.021041 | debian-bookworm | + 2026-06-02 05:54:50.021153 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 05:54:50.021260 | debian-bookworm | + 2026-06-02 05:54:50.021368 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 05:54:50.021487 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 05:54:50.021598 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 05:54:50.021706 | debian-bookworm | + 2026-06-02 05:54:50.021820 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 05:54:50.021932 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 05:54:50.022040 | debian-bookworm | + 2026-06-02 05:54:50.022152 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 05:54:50.022264 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 05:54:50.022375 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 05:54:50.022504 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 05:54:50.022623 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 05:54:50.022732 | debian-bookworm | + 2026-06-02 05:54:50.022843 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 05:54:50.022953 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 05:54:50.023062 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 05:54:50.023172 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 05:54:50.023283 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 05:54:50.023414 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 05:54:50.023538 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 05:54:50.023649 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 05:54:50.023757 | debian-bookworm | + 2026-06-02 05:54:50.023866 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 05:54:50.023980 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024092 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024211 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024325 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024435 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024555 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 05:54:50.024663 | debian-bookworm | + 2026-06-02 05:54:50.024770 | debian-bookworm | +# npm 2026-06-02 05:54:50.024882 | debian-bookworm | +## T1072 third party software 2026-06-02 05:54:50.024994 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 05:54:50.025106 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 05:54:50.025219 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 05:54:50.025325 | debian-bookworm | + 2026-06-02 05:54:50.025436 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 05:54:50.025569 | debian-bookworm | +## T1072 third party software 2026-06-02 05:54:50.025682 | debian-bookworm | +## https://www.cpan.org 2026-06-02 05:54:50.025796 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 05:54:50.025903 | debian-bookworm | + 2026-06-02 05:54:50.026012 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 05:54:50.026123 | debian-bookworm | +## T1072 third party software 2026-06-02 05:54:50.026233 | debian-bookworm | +## https://rubygems.org 2026-06-02 05:54:50.026344 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 05:54:50.026450 | debian-bookworm | + 2026-06-02 05:54:50.026570 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 05:54:50.026681 | debian-bookworm | +## T1072 third party software 2026-06-02 05:54:50.026791 | debian-bookworm | +## https://luarocks.org 2026-06-02 05:54:50.026907 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 05:54:50.027016 | debian-bookworm | + 2026-06-02 05:54:50.027127 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 05:54:50.027239 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 05:54:50.027367 | debian-bookworm | +## T1072 third party software 2026-06-02 05:54:50.027501 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 05:54:50.027616 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 05:54:50.027724 | debian-bookworm | + 2026-06-02 05:54:50.027834 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 05:54:50.027943 | debian-bookworm | + 2026-06-02 05:54:50.028052 | debian-bookworm | +## GDS specific secrets 2026-06-02 05:54:50.028166 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 05:54:50.028274 | debian-bookworm | + 2026-06-02 05:54:50.028387 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 05:54:50.028510 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 05:54:50.028621 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 05:54:50.028728 | debian-bookworm | + 2026-06-02 05:54:50.028839 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 05:54:50.028948 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 05:54:50.029052 | debian-bookworm | + 2026-06-02 05:54:50.029159 | debian-bookworm | +## Salt 2026-06-02 05:54:50.029271 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 05:54:50.029384 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 05:54:50.029503 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 05:54:50.029614 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 05:54:50.029721 | debian-bookworm | + 2026-06-02 05:54:50.029837 | debian-bookworm | +## Otter 2026-06-02 05:54:50.029949 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 05:54:50.030058 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 05:54:50.030165 | debian-bookworm | + 2026-06-02 05:54:50.030277 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 05:54:50.030388 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 05:54:50.030518 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 05:54:50.030631 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 05:54:50.030741 | debian-bookworm | +### macOS 2026-06-02 05:54:50.030852 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 05:54:50.030963 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 05:54:50.031077 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 05:54:50.031183 | debian-bookworm | + 2026-06-02 05:54:50.031295 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 05:54:50.031420 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 05:54:50.031540 | debian-bookworm | +### macOS 2026-06-02 05:54:50.031652 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 05:54:50.031767 | debian-bookworm | + 2026-06-02 05:54:50.031882 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 05:54:50.031992 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 05:54:50.032100 | debian-bookworm | +### macOS 2026-06-02 05:54:50.032209 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 05:54:50.032318 | debian-bookworm | + 2026-06-02 05:54:50.032429 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 05:54:50.032560 | debian-bookworm | + 2026-06-02 05:54:50.032674 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 05:54:50.032785 | debian-bookworm | +### macOS 2026-06-02 05:54:50.032897 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 05:54:50.033005 | debian-bookworm | + 2026-06-02 05:54:50.033117 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 05:54:50.033229 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 05:54:50.033337 | debian-bookworm | +### macOS 2026-06-02 05:54:50.033447 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 05:54:50.033564 | debian-bookworm | + 2026-06-02 05:54:50.033674 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 05:54:50.033785 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 05:54:50.033895 | debian-bookworm | +### macOS 2026-06-02 05:54:50.034007 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 05:54:50.034115 | debian-bookworm | + 2026-06-02 05:54:50.034229 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 05:54:50.034341 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 05:54:50.034460 | debian-bookworm | +### macOS 2026-06-02 05:54:50.034642 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 05:54:50.034773 | debian-bookworm | + 2026-06-02 05:54:50.034890 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 05:54:50.035045 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 05:54:50.035164 | debian-bookworm | +### macOS 2026-06-02 05:54:50.035276 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 05:54:50.035405 | debian-bookworm | + 2026-06-02 05:54:50.035531 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 05:54:50.035643 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 05:54:50.035754 | debian-bookworm | +### macOS 2026-06-02 05:54:50.035891 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 05:54:50.036001 | debian-bookworm | + 2026-06-02 05:54:50.036113 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 05:54:50.036223 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 05:54:50.036335 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 05:54:50.036447 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 05:54:50.036602 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 05:54:50.036747 | debian-bookworm | +### macOS 2026-06-02 05:54:50.036878 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 05:54:50.036987 | debian-bookworm | + 2026-06-02 05:54:50.037098 | debian-bookworm | +## Docker 2026-06-02 05:54:50.037209 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 05:54:50.037321 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 05:54:50.037432 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 05:54:50.037578 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 05:54:50.037695 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 05:54:50.037807 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 05:54:50.037917 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 05:54:50.038026 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 05:54:50.038137 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 05:54:50.038283 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 05:54:50.038397 | debian-bookworm | + 2026-06-02 05:54:50.038565 | debian-bookworm | +## Virtualization stuff 2026-06-02 05:54:50.038699 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 05:54:50.038813 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 05:54:50.038923 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 05:54:50.039032 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 05:54:50.039143 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 05:54:50.039255 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 05:54:50.039409 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 05:54:50.039547 | debian-bookworm | + 2026-06-02 05:54:50.039735 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 05:54:50.039849 | debian-bookworm | + 2026-06-02 05:54:50.039961 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 05:54:50.040082 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 05:54:50.040195 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 05:54:50.040322 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 05:54:50.040437 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 05:54:50.040574 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 05:54:50.040691 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 05:54:50.040801 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 05:54:50.040910 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 05:54:50.041023 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 05:54:50.041133 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 05:54:50.041249 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 05:54:50.041364 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 05:54:50.041486 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 05:54:50.041599 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 05:54:50.041711 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 05:54:50.041822 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 05:54:50.041929 | debian-bookworm | + 2026-06-02 05:54:50.042043 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 05:54:50.042149 | debian-bookworm | + 2026-06-02 05:54:50.042261 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 05:54:50.042371 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 05:54:50.042491 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 05:54:50.042604 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 05:54:50.042721 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 05:54:50.042834 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 05:54:50.042945 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 05:54:50.043059 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 05:54:50.043165 | debian-bookworm | + 2026-06-02 05:54:50.043277 | debian-bookworm | +### qemu on macOS 2026-06-02 05:54:50.043410 | debian-bookworm | + 2026-06-02 05:54:50.043535 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 05:54:50.043646 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 05:54:50.043758 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 05:54:50.043869 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 05:54:50.043983 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 05:54:50.044091 | debian-bookworm | + 2026-06-02 05:54:50.044203 | debian-bookworm | +## Kubelet 2026-06-02 05:54:50.044313 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 05:54:50.044421 | debian-bookworm | + 2026-06-02 05:54:50.044555 | debian-bookworm | +# ipc system call 2026-06-02 05:54:50.044667 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 05:54:50.044776 | debian-bookworm | + 2026-06-02 05:54:50.044890 | debian-bookworm | +## msgctl 2026-06-02 05:54:50.045008 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 05:54:50.045117 | debian-bookworm | +## msgget 2026-06-02 05:54:50.045229 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 05:54:50.045339 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:50.045451 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 05:54:50.045571 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 05:54:50.045679 | debian-bookworm | + 2026-06-02 05:54:50.045790 | debian-bookworm | +## semctl 2026-06-02 05:54:50.045901 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 05:54:50.046010 | debian-bookworm | +## semget 2026-06-02 05:54:50.046122 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 05:54:50.046230 | debian-bookworm | +## semop 2026-06-02 05:54:50.046341 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 05:54:50.046453 | debian-bookworm | +## semtimedop 2026-06-02 05:54:50.046574 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 05:54:50.046684 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:50.046806 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 05:54:50.046918 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 05:54:50.047032 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 05:54:50.047145 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 05:54:50.047254 | debian-bookworm | + 2026-06-02 05:54:50.047375 | debian-bookworm | +## shmctl 2026-06-02 05:54:50.047510 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 05:54:50.047624 | debian-bookworm | +## shmget 2026-06-02 05:54:50.047738 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 05:54:50.047851 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:50.047963 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 05:54:50.048075 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 05:54:50.048185 | debian-bookworm | + 2026-06-02 05:54:50.048298 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 05:54:50.048406 | debian-bookworm | + 2026-06-02 05:54:50.048529 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 05:54:50.048639 | debian-bookworm | + 2026-06-02 05:54:50.048751 | debian-bookworm | +## Common Shells 2026-06-02 05:54:50.048861 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 05:54:50.048973 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 05:54:50.049085 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 05:54:50.049197 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 05:54:50.049308 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 05:54:50.049418 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 05:54:50.049537 | debian-bookworm | + 2026-06-02 05:54:50.049651 | debian-bookworm | +## Root command executions 2026-06-02 05:54:50.049763 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 05:54:50.049870 | debian-bookworm | + 2026-06-02 05:54:50.049983 | debian-bookworm | +## File Deletion Events by User 2026-06-02 05:54:50.050098 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 05:54:50.050207 | debian-bookworm | + 2026-06-02 05:54:50.050317 | debian-bookworm | +## File Access 2026-06-02 05:54:50.050433 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 05:54:50.050561 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 05:54:50.050679 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 05:54:50.050788 | debian-bookworm | + 2026-06-02 05:54:50.050898 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 05:54:50.051011 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 05:54:50.051124 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 05:54:50.051231 | debian-bookworm | + 2026-06-02 05:54:50.051359 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 05:54:50.051499 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 05:54:50.051618 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 05:54:50.051724 | debian-bookworm | + 2026-06-02 05:54:50.051832 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 05:54:50.051945 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 05:54:50.052058 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 05:54:50.052171 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 05:54:50.052281 | debian-bookworm | +### bit API. 2026-06-02 05:54:50.052393 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 05:54:50.052507 | debian-bookworm | + 2026-06-02 05:54:50.052620 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 05:54:50.052735 | debian-bookworm | + 2026-06-02 05:54:50.052843 | debian-bookworm | +##-e 2 2026-06-02 05:54:50.052946 | debian-bookworm | 2026-06-02 05:54:50.053166 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780379689.2779891-2603-42205513052918/.source.rules", "state": "file", "uid": 0} 2026-06-02 05:54:50.053276 | debian-bookworm | 2026-06-02 05:54:50.053390 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 05:54:50.658049 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:45 UTC", "ActiveEnterTimestampMonotonic": "8582556364", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:44 UTC", "AssertTimestampMonotonic": "8582497641", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "43550000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:44 UTC", "ConditionTimestampMonotonic": "8582497599", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2375", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:45 UTC", "ExecMainStartTimestampMonotonic": "8582534675", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:44 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2374 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:44 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2374 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:45 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2378 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:45 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2378 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:45 UTC", "InactiveExitTimestampMonotonic": "8582513094", "InvocationID": "cc8725eabb4b4e09b9ae16a4db6ea5ca", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2375", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "700416", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 05:54:45 UTC", "StateChangeTimestampMonotonic": "8582556364", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:50.660170 | debian-bookworm | 2026-06-02 05:54:50.660193 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 05:54:51.035330 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008438", "end": "2026-06-02 05:54:50.995238", "msg": "", "rc": 0, "start": "2026-06-02 05:54:50.986800", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 05:54:51.035515 | debian-bookworm | 2026-06-02 05:54:51.035523 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 05:54:51.724959 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 05:54:51.725358 | ubuntu-noble | audispd-plugins 2026-06-02 05:54:51.725661 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 05:54:51.726063 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780379585, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (558 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (558 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 05:54:51.726381 | ubuntu-noble | 2026-06-02 05:54:51.726680 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 05:54:51.359433 | debian-bookworm | --- before 2026-06-02 05:54:51.359528 | debian-bookworm | +++ after 2026-06-02 05:54:51.359540 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 05:54:51.359550 | debian-bookworm | { 2026-06-02 05:54:51.359559 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 05:54:51.359569 | debian-bookworm | - "state": "file" 2026-06-02 05:54:51.359579 | debian-bookworm | + "state": "absent" 2026-06-02 05:54:51.359588 | debian-bookworm | } 2026-06-02 05:54:51.359596 | debian-bookworm | 2026-06-02 05:54:51.359607 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 05:54:51.359618 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 05:54:51.359639 | debian-bookworm | 2026-06-02 05:54:51.359698 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 05:54:52.048121 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:45 UTC", "ActiveEnterTimestampMonotonic": "8582556364", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:44 UTC", "AssertTimestampMonotonic": "8582497641", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "44774000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:44 UTC", "ConditionTimestampMonotonic": "8582497599", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2375", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:45 UTC", "ExecMainStartTimestampMonotonic": "8582534675", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:44 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2374 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:44 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2374 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:45 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2378 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:45 UTC] ; stop_time=[Tue 2026-06-02 05:54:45 UTC] ; pid=2378 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:45 UTC", "InactiveExitTimestampMonotonic": "8582513094", "InvocationID": "cc8725eabb4b4e09b9ae16a4db6ea5ca", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2375", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "708608", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 05:54:45 UTC", "StateChangeTimestampMonotonic": "8582556364", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:52.053064 | debian-bookworm | 2026-06-02 05:54:52.053100 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 05:54:52.464422 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.098626", "end": "2026-06-02 05:54:52.399887", "msg": "", "rc": 0, "start": "2026-06-02 05:54:52.301261", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2764\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 540\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2764\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 203\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2764", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 540", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2764", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 203", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 05:54:52.464539 | debian-bookworm | 2026-06-02 05:54:52.464550 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 05:54:52.918657 | ubuntu-noble | --- before 2026-06-02 05:54:52.918860 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-241895j5ngva/tmpw7066lg6/auditd.conf.j2 2026-06-02 05:54:52.918994 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 05:54:52.919135 | ubuntu-noble | +# 2026-06-02 05:54:52.919284 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 05:54:52.919407 | ubuntu-noble | +# 2026-06-02 05:54:52.919521 | ubuntu-noble | + 2026-06-02 05:54:52.919642 | ubuntu-noble | +local_events = yes 2026-06-02 05:54:52.919758 | ubuntu-noble | +write_logs = yes 2026-06-02 05:54:52.919876 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 05:54:52.919993 | ubuntu-noble | +log_group = adm 2026-06-02 05:54:52.920124 | ubuntu-noble | +log_format = RAW 2026-06-02 05:54:52.920261 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 05:54:52.920383 | ubuntu-noble | +freq = 50 2026-06-02 05:54:52.920501 | ubuntu-noble | +max_log_file = 8 2026-06-02 05:54:52.920619 | ubuntu-noble | +num_logs = 5 2026-06-02 05:54:52.920736 | ubuntu-noble | +priority_boost = 4 2026-06-02 05:54:52.920853 | ubuntu-noble | +disp_qos = lossy 2026-06-02 05:54:52.920970 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 05:54:52.921099 | ubuntu-noble | +name_format = NONE 2026-06-02 05:54:52.921218 | ubuntu-noble | +##name = mydomain 2026-06-02 05:54:52.921351 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 05:54:52.921470 | ubuntu-noble | +space_left = 12361 2026-06-02 05:54:52.921584 | ubuntu-noble | +space_left_action = email 2026-06-02 05:54:52.921701 | ubuntu-noble | +verify_email = yes 2026-06-02 05:54:52.921815 | ubuntu-noble | +action_mail_acct = root 2026-06-02 05:54:52.921931 | ubuntu-noble | +admin_space_left = 50 2026-06-02 05:54:52.922054 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 05:54:52.922223 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 05:54:52.922370 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 05:54:52.922493 | ubuntu-noble | +use_libwrap = yes 2026-06-02 05:54:52.922611 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 05:54:52.922728 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 05:54:52.922848 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 05:54:52.923008 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 05:54:52.923215 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 05:54:52.923424 | ubuntu-noble | +enable_krb5 = no 2026-06-02 05:54:52.923582 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 05:54:52.923700 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 05:54:52.923810 | ubuntu-noble | +distribute_network = no 2026-06-02 05:54:52.923916 | ubuntu-noble | 2026-06-02 05:54:52.924058 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780379691.7490985-2825-232289056438365/.source.conf", "state": "file", "uid": 0} 2026-06-02 05:54:52.924391 | ubuntu-noble | 2026-06-02 05:54:52.924559 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 05:54:53.227520 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:51 UTC", "ActiveEnterTimestampMonotonic": "8589488623", "ActiveExitTimestamp": "Tue 2026-06-02 05:54:51 UTC", "ActiveExitTimestampMonotonic": "8589299584", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:51 UTC", "AssertTimestampMonotonic": "8589344980", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "159092000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:51 UTC", "ConditionTimestampMonotonic": "8589344895", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3406", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2764", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:51 UTC", "ExecMainStartTimestampMonotonic": "8589380325", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:51 UTC] ; stop_time=[Tue 2026-06-02 05:54:51 UTC] ; pid=2763 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:51 UTC] ; stop_time=[Tue 2026-06-02 05:54:51 UTC] ; pid=2763 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:51 UTC] ; stop_time=[Tue 2026-06-02 05:54:51 UTC] ; pid=2768 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:51 UTC] ; stop_time=[Tue 2026-06-02 05:54:51 UTC] ; pid=2768 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 05:54:51 UTC", "InactiveEnterTimestampMonotonic": "8589340757", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:51 UTC", "InactiveExitTimestampMonotonic": "8589356913", "InvocationID": "99b14cbe9f0d43cca98b8bc38a6b2bcd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2764", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2068480", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 05:54:51 UTC", "StateChangeTimestampMonotonic": "8589488623", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:53.228156 | debian-bookworm | 2026-06-02 05:54:53.228176 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 05:54:53.228182 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 05:54:53.228186 | debian-bookworm | 2026-06-02 05:54:53.331876 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 05:54:53.332421 | ubuntu-noble | 2026-06-02 05:54:53.332443 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 05:54:53.317744 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 05:54:53.318545 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 05:54:53.795598 | debian-bookworm | ok: Runtime: 0:00:15.135253 2026-06-02 05:54:54.134309 | ubuntu-noble | --- before 2026-06-02 05:54:54.134362 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-241895j5ngva/tmpkk9fkuxu/20-neo23x0.rules.j2 2026-06-02 05:54:54.134373 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 05:54:54.134382 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 05:54:54.134390 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 05:54:54.134648 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 05:54:54.134883 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 05:54:54.135140 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 05:54:54.135409 | ubuntu-noble | +# 2026-06-02 05:54:54.135669 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 05:54:54.135906 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 05:54:54.136151 | ubuntu-noble | +# 2026-06-02 05:54:54.136420 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 05:54:54.136656 | ubuntu-noble | +# 2026-06-02 05:54:54.136895 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 05:54:54.137154 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 05:54:54.137410 | ubuntu-noble | +# 2026-06-02 05:54:54.137657 | ubuntu-noble | +# Based on rules published here: 2026-06-02 05:54:54.137894 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 05:54:54.138478 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 05:54:54.138854 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 05:54:54.139278 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 05:54:54.139626 | ubuntu-noble | +# Linux audit repo 2026-06-02 05:54:54.139983 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 05:54:54.140440 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 05:54:54.140763 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 05:54:54.140959 | ubuntu-noble | +# 2026-06-02 05:54:54.141175 | ubuntu-noble | +# Further rules 2026-06-02 05:54:54.141474 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 05:54:54.141788 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 05:54:54.142064 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 05:54:54.142427 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 05:54:54.143267 | ubuntu-noble | + 2026-06-02 05:54:54.143284 | ubuntu-noble | +# Remove any existing rules 2026-06-02 05:54:54.143291 | ubuntu-noble | +-D 2026-06-02 05:54:54.143298 | ubuntu-noble | + 2026-06-02 05:54:54.143342 | ubuntu-noble | +# Buffer Size 2026-06-02 05:54:54.143539 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 05:54:54.143723 | ubuntu-noble | +-b 8192 2026-06-02 05:54:54.143901 | ubuntu-noble | + 2026-06-02 05:54:54.144087 | ubuntu-noble | +# Failure Mode 2026-06-02 05:54:54.144322 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 05:54:54.144507 | ubuntu-noble | +-f 1 2026-06-02 05:54:54.144684 | ubuntu-noble | + 2026-06-02 05:54:54.144869 | ubuntu-noble | +# Ignore errors 2026-06-02 05:54:54.145062 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 05:54:54.145270 | ubuntu-noble | +-i 2026-06-02 05:54:54.145450 | ubuntu-noble | + 2026-06-02 05:54:54.145637 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 05:54:54.145812 | ubuntu-noble | + 2026-06-02 05:54:54.146000 | ubuntu-noble | +## Audit the audit logs 2026-06-02 05:54:54.146202 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 05:54:54.146411 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 05:54:54.146602 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 05:54:54.146778 | ubuntu-noble | + 2026-06-02 05:54:54.146960 | ubuntu-noble | +## Auditd configuration 2026-06-02 05:54:54.147187 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 05:54:54.147404 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 05:54:54.147599 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 05:54:54.149272 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 05:54:54.149287 | ubuntu-noble | + 2026-06-02 05:54:54.149293 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 05:54:54.149298 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 05:54:54.149304 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 05:54:54.149322 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 05:54:54.149327 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 05:54:54.149332 | ubuntu-noble | + 2026-06-02 05:54:54.149338 | ubuntu-noble | +## Access to all audit trails 2026-06-02 05:54:54.149343 | ubuntu-noble | + 2026-06-02 05:54:54.149349 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 05:54:54.149377 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 05:54:54.149557 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 05:54:54.149729 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 05:54:54.149897 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 05:54:54.150053 | ubuntu-noble | + 2026-06-02 05:54:54.150228 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 05:54:54.150398 | ubuntu-noble | + 2026-06-02 05:54:54.150566 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 05:54:54.150718 | ubuntu-noble | + 2026-06-02 05:54:54.150884 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 05:54:54.151049 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 05:54:54.151239 | ubuntu-noble | + 2026-06-02 05:54:54.151430 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 05:54:54.151590 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 05:54:54.151728 | ubuntu-noble | + 2026-06-02 05:54:54.151880 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 05:54:54.152024 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 05:54:54.152181 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 05:54:54.152334 | ubuntu-noble | + 2026-06-02 05:54:54.152484 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 05:54:54.152636 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 05:54:54.152772 | ubuntu-noble | + 2026-06-02 05:54:54.152921 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 05:54:54.153075 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 05:54:54.153222 | ubuntu-noble | + 2026-06-02 05:54:54.153379 | ubuntu-noble | +## Open VM Tools 2026-06-02 05:54:54.153532 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 05:54:54.153669 | ubuntu-noble | + 2026-06-02 05:54:54.153819 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 05:54:54.153967 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 05:54:54.154143 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 05:54:54.154292 | ubuntu-noble | + 2026-06-02 05:54:54.154435 | ubuntu-noble | +## FileBeat 2026-06-02 05:54:54.154576 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 05:54:54.154706 | ubuntu-noble | + 2026-06-02 05:54:54.154841 | ubuntu-noble | +## More information on how to filter events 2026-06-02 05:54:54.154981 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 05:54:54.155121 | ubuntu-noble | + 2026-06-02 05:54:54.155271 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 05:54:54.155404 | ubuntu-noble | + 2026-06-02 05:54:54.155540 | ubuntu-noble | +## Kernel parameters 2026-06-02 05:54:54.155675 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 05:54:54.155807 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 05:54:54.155934 | ubuntu-noble | + 2026-06-02 05:54:54.156068 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 05:54:54.156223 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 05:54:54.156377 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 05:54:54.156519 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 05:54:54.156660 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 05:54:54.156788 | ubuntu-noble | + 2026-06-02 05:54:54.156925 | ubuntu-noble | +## Modprobe configuration 2026-06-02 05:54:54.157064 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 05:54:54.157210 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 05:54:54.157354 | ubuntu-noble | + 2026-06-02 05:54:54.157495 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 05:54:54.157636 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 05:54:54.157774 | ubuntu-noble | + 2026-06-02 05:54:54.157910 | ubuntu-noble | +## Special files 2026-06-02 05:54:54.158052 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 05:54:54.158209 | ubuntu-noble | + 2026-06-02 05:54:54.158362 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 05:54:54.158505 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 05:54:54.158621 | ubuntu-noble | + 2026-06-02 05:54:54.158751 | ubuntu-noble | +### NFS mount 2026-06-02 05:54:54.158888 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.159030 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.159160 | ubuntu-noble | + 2026-06-02 05:54:54.159299 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 05:54:54.159431 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 05:54:54.159548 | ubuntu-noble | + 2026-06-02 05:54:54.159670 | ubuntu-noble | +## Time 2026-06-02 05:54:54.159801 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 05:54:54.159924 | ubuntu-noble | +### Local time zone 2026-06-02 05:54:54.160047 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 05:54:54.160176 | ubuntu-noble | + 2026-06-02 05:54:54.160310 | ubuntu-noble | +## Stunnel 2026-06-02 05:54:54.161262 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 05:54:54.161274 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 05:54:54.161278 | ubuntu-noble | + 2026-06-02 05:54:54.161283 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 05:54:54.161287 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 05:54:54.161291 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 05:54:54.161295 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 05:54:54.161300 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 05:54:54.161328 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 05:54:54.161449 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 05:54:54.161562 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 05:54:54.161675 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 05:54:54.161786 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 05:54:54.161894 | ubuntu-noble | + 2026-06-02 05:54:54.162004 | ubuntu-noble | +## User, group, password databases 2026-06-02 05:54:54.162123 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 05:54:54.162233 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 05:54:54.162356 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 05:54:54.162469 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 05:54:54.162582 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 05:54:54.162692 | ubuntu-noble | + 2026-06-02 05:54:54.162804 | ubuntu-noble | +## Sudoers file changes 2026-06-02 05:54:54.162917 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 05:54:54.163029 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 05:54:54.163144 | ubuntu-noble | + 2026-06-02 05:54:54.165276 | ubuntu-noble | +## Passwd 2026-06-02 05:54:54.165298 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 05:54:54.165303 | ubuntu-noble | + 2026-06-02 05:54:54.165307 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 05:54:54.165311 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 05:54:54.165315 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 05:54:54.165319 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 05:54:54.165323 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 05:54:54.165326 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 05:54:54.165330 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 05:54:54.165334 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 05:54:54.165496 | ubuntu-noble | + 2026-06-02 05:54:54.165637 | ubuntu-noble | +## Login configuration and information 2026-06-02 05:54:54.165755 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 05:54:54.165869 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 05:54:54.165979 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 05:54:54.166119 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 05:54:54.166237 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 05:54:54.166362 | ubuntu-noble | + 2026-06-02 05:54:54.166482 | ubuntu-noble | +## Network Environment 2026-06-02 05:54:54.166593 | ubuntu-noble | +### Changes to hostname 2026-06-02 05:54:54.166720 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 05:54:54.166915 | ubuntu-noble | + 2026-06-02 05:54:54.167056 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 05:54:54.167195 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 05:54:54.167338 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 05:54:54.167454 | ubuntu-noble | + 2026-06-02 05:54:54.167781 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 05:54:54.167907 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 05:54:54.168016 | ubuntu-noble | + 2026-06-02 05:54:54.168144 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 05:54:54.169547 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 05:54:54.169673 | ubuntu-noble | + 2026-06-02 05:54:54.169864 | ubuntu-noble | +### Changes to other files 2026-06-02 05:54:54.169988 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 05:54:54.170128 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 05:54:54.170264 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 05:54:54.170384 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 05:54:54.170510 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 05:54:54.170621 | ubuntu-noble | + 2026-06-02 05:54:54.170737 | ubuntu-noble | +### Changes to issue 2026-06-02 05:54:54.170848 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 05:54:54.170961 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 05:54:54.171069 | ubuntu-noble | + 2026-06-02 05:54:54.171210 | ubuntu-noble | +## System startup scripts 2026-06-02 05:54:54.171342 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 05:54:54.171456 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 05:54:54.171567 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 05:54:54.171672 | ubuntu-noble | + 2026-06-02 05:54:54.171923 | ubuntu-noble | +## Library search paths 2026-06-02 05:54:54.172050 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 05:54:54.172384 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 05:54:54.172567 | ubuntu-noble | + 2026-06-02 05:54:54.172688 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 05:54:54.172801 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 05:54:54.172910 | ubuntu-noble | + 2026-06-02 05:54:54.173038 | ubuntu-noble | +## Pam configuration 2026-06-02 05:54:54.173184 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 05:54:54.173323 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 05:54:54.173441 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 05:54:54.173558 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 05:54:54.173670 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 05:54:54.173781 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 05:54:54.173894 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 05:54:54.174000 | ubuntu-noble | + 2026-06-02 05:54:54.174126 | ubuntu-noble | +## Mail configuration 2026-06-02 05:54:54.174240 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 05:54:54.174376 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 05:54:54.174486 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 05:54:54.174590 | ubuntu-noble | + 2026-06-02 05:54:54.174700 | ubuntu-noble | +## SSH configuration 2026-06-02 05:54:54.174814 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 05:54:54.174927 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 05:54:54.175032 | ubuntu-noble | + 2026-06-02 05:54:54.175180 | ubuntu-noble | +## root ssh key tampering 2026-06-02 05:54:54.176269 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 05:54:54.176281 | ubuntu-noble | + 2026-06-02 05:54:54.176285 | ubuntu-noble | +# Systemd 2026-06-02 05:54:54.176289 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 05:54:54.176292 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 05:54:54.176296 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 05:54:54.176300 | ubuntu-noble | + 2026-06-02 05:54:54.176303 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 05:54:54.176307 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:54.176310 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:54.176315 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 05:54:54.176434 | ubuntu-noble | + 2026-06-02 05:54:54.176550 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 05:54:54.176664 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 05:54:54.176779 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 05:54:54.176886 | ubuntu-noble | + 2026-06-02 05:54:54.177004 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 05:54:54.177205 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 05:54:54.177341 | ubuntu-noble | + 2026-06-02 05:54:54.177459 | ubuntu-noble | +## Critical elements access failures 2026-06-02 05:54:54.177577 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.177692 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.177809 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.177923 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.178038 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.178167 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.178300 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.178421 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 05:54:54.178525 | ubuntu-noble | + 2026-06-02 05:54:54.178638 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 05:54:54.178749 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 05:54:54.178862 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 05:54:54.178971 | ubuntu-noble | + 2026-06-02 05:54:54.179081 | ubuntu-noble | +## Power state 2026-06-02 05:54:54.179225 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 05:54:54.179357 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 05:54:54.179470 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 05:54:54.179582 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 05:54:54.179686 | ubuntu-noble | + 2026-06-02 05:54:54.179795 | ubuntu-noble | +## Session initiation information 2026-06-02 05:54:54.179909 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 05:54:54.180022 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 05:54:54.180146 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 05:54:54.180268 | ubuntu-noble | + 2026-06-02 05:54:54.180390 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 05:54:54.180507 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.180623 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.180740 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.180857 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.180974 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181090 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181228 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181369 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181491 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181607 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181723 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181840 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.181959 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 05:54:54.182063 | ubuntu-noble | + 2026-06-02 05:54:54.182190 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 05:54:54.182316 | ubuntu-noble | + 2026-06-02 05:54:54.182450 | ubuntu-noble | +## Reconnaissance 2026-06-02 05:54:54.182565 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 05:54:54.182676 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 05:54:54.182802 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 05:54:54.182915 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 05:54:54.183028 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 05:54:54.183175 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 05:54:54.183298 | ubuntu-noble | + 2026-06-02 05:54:54.183417 | ubuntu-noble | +## Suspicious activity 2026-06-02 05:54:54.183536 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 05:54:54.183651 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 05:54:54.185263 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 05:54:54.185277 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 05:54:54.185281 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 05:54:54.185285 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 05:54:54.185288 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 05:54:54.185292 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 05:54:54.185295 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 05:54:54.185299 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 05:54:54.185302 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 05:54:54.185306 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 05:54:54.185309 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 05:54:54.185313 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 05:54:54.185316 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 05:54:54.185320 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 05:54:54.185323 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 05:54:54.185430 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 05:54:54.185545 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 05:54:54.185660 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 05:54:54.185775 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 05:54:54.185887 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 05:54:54.185995 | ubuntu-noble | + 2026-06-02 05:54:54.186130 | ubuntu-noble | +## sssd 2026-06-02 05:54:54.186272 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.186399 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.186518 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.186636 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.186754 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.186861 | ubuntu-noble | + 2026-06-02 05:54:54.186973 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 05:54:54.187078 | ubuntu-noble | + 2026-06-02 05:54:54.187227 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 05:54:54.187358 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 05:54:54.187477 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 05:54:54.187592 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 05:54:54.187699 | ubuntu-noble | + 2026-06-02 05:54:54.187813 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 05:54:54.187927 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 05:54:54.188033 | ubuntu-noble | + 2026-06-02 05:54:54.188160 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 05:54:54.188289 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 05:54:54.188400 | ubuntu-noble | + 2026-06-02 05:54:54.188515 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 05:54:54.188629 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 05:54:54.188735 | ubuntu-noble | + 2026-06-02 05:54:54.188850 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 05:54:54.188964 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 05:54:54.189071 | ubuntu-noble | + 2026-06-02 05:54:54.189209 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 05:54:54.189346 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 05:54:54.189459 | ubuntu-noble | + 2026-06-02 05:54:54.189581 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 05:54:54.189697 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 05:54:54.189803 | ubuntu-noble | + 2026-06-02 05:54:54.189917 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 05:54:54.190032 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 05:54:54.190164 | ubuntu-noble | + 2026-06-02 05:54:54.190300 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 05:54:54.190418 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 05:54:54.190532 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 05:54:54.190646 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 05:54:54.190753 | ubuntu-noble | + 2026-06-02 05:54:54.190866 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 05:54:54.190979 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 05:54:54.191087 | ubuntu-noble | + 2026-06-02 05:54:54.191214 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 05:54:54.191340 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 05:54:54.191457 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 05:54:54.191565 | ubuntu-noble | + 2026-06-02 05:54:54.191679 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 05:54:54.191791 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 05:54:54.191903 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 05:54:54.192016 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 05:54:54.192155 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 05:54:54.192283 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 05:54:54.192404 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 05:54:54.192518 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 05:54:54.192632 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 05:54:54.192745 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 05:54:54.192856 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 05:54:54.192962 | ubuntu-noble | + 2026-06-02 05:54:54.193073 | ubuntu-noble | +### kde4 2026-06-02 05:54:54.193221 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.193356 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 05:54:54.193469 | ubuntu-noble | + 2026-06-02 05:54:54.193581 | ubuntu-noble | +## dbus-send invocation 2026-06-02 05:54:54.193698 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 05:54:54.193811 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 05:54:54.193924 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 05:54:54.194037 | ubuntu-noble | + 2026-06-02 05:54:54.194187 | ubuntu-noble | +## pkexec invocation 2026-06-02 05:54:54.194324 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 05:54:54.194441 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 05:54:54.194550 | ubuntu-noble | + 2026-06-02 05:54:54.194664 | ubuntu-noble | +## Suspicious shells 2026-06-02 05:54:54.194777 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 05:54:54.194887 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 05:54:54.195000 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 05:54:54.195121 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 05:54:54.195235 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 05:54:54.195361 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 05:54:54.195479 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 05:54:54.195589 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 05:54:54.195700 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 05:54:54.195806 | ubuntu-noble | + 2026-06-02 05:54:54.195915 | ubuntu-noble | +# Web Server Actvity 2026-06-02 05:54:54.196031 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 05:54:54.196157 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 05:54:54.196279 | ubuntu-noble | + 2026-06-02 05:54:54.196394 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 05:54:54.196506 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 05:54:54.196626 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 05:54:54.196741 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 05:54:54.196856 | ubuntu-noble | + 2026-06-02 05:54:54.196972 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 05:54:54.197085 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 05:54:54.199264 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 05:54:54.199279 | ubuntu-noble | + 2026-06-02 05:54:54.199283 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 05:54:54.199287 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 05:54:54.199291 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 05:54:54.199295 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 05:54:54.199299 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 05:54:54.199303 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 05:54:54.199306 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 05:54:54.199310 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 05:54:54.199314 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 05:54:54.199318 | ubuntu-noble | + 2026-06-02 05:54:54.199322 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 05:54:54.199326 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 05:54:54.199330 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 05:54:54.199334 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 05:54:54.199337 | ubuntu-noble | + 2026-06-02 05:54:54.199341 | ubuntu-noble | +## Injection 2026-06-02 05:54:54.199345 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 05:54:54.199349 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 05:54:54.199354 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 05:54:54.199462 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 05:54:54.199577 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 05:54:54.199694 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 05:54:54.199801 | ubuntu-noble | + 2026-06-02 05:54:54.199912 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 05:54:54.200026 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 05:54:54.200150 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 05:54:54.200280 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 05:54:54.200398 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 05:54:54.200504 | ubuntu-noble | + 2026-06-02 05:54:54.202599 | ubuntu-noble | +## Privilege Abuse 2026-06-02 05:54:54.202812 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 05:54:54.203332 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 05:54:54.203521 | ubuntu-noble | + 2026-06-02 05:54:54.203650 | ubuntu-noble | +# Socket Creations 2026-06-02 05:54:54.203778 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 05:54:54.203891 | ubuntu-noble | + 2026-06-02 05:54:54.204027 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 05:54:54.204159 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 05:54:54.204327 | ubuntu-noble | + 2026-06-02 05:54:54.204463 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 05:54:54.204579 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 05:54:54.204685 | ubuntu-noble | + 2026-06-02 05:54:54.204801 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 05:54:54.204908 | ubuntu-noble | + 2026-06-02 05:54:54.205020 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 05:54:54.205164 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 05:54:54.205300 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 05:54:54.205415 | ubuntu-noble | + 2026-06-02 05:54:54.205532 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 05:54:54.205647 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 05:54:54.205754 | ubuntu-noble | + 2026-06-02 05:54:54.205867 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 05:54:54.205979 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 05:54:54.206103 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 05:54:54.206220 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 05:54:54.206475 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 05:54:54.206592 | ubuntu-noble | + 2026-06-02 05:54:54.206707 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 05:54:54.206821 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 05:54:54.206933 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 05:54:54.207050 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 05:54:54.207188 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 05:54:54.207317 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 05:54:54.207435 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 05:54:54.207549 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 05:54:54.207654 | ubuntu-noble | + 2026-06-02 05:54:54.207767 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 05:54:54.207884 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208003 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208131 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208269 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208392 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208510 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 05:54:54.208619 | ubuntu-noble | + 2026-06-02 05:54:54.208730 | ubuntu-noble | +# npm 2026-06-02 05:54:54.208846 | ubuntu-noble | +## T1072 third party software 2026-06-02 05:54:54.208957 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 05:54:54.209072 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 05:54:54.209201 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 05:54:54.209329 | ubuntu-noble | + 2026-06-02 05:54:54.209448 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 05:54:54.209562 | ubuntu-noble | +## T1072 third party software 2026-06-02 05:54:54.209674 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 05:54:54.209799 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 05:54:54.209908 | ubuntu-noble | + 2026-06-02 05:54:54.210020 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 05:54:54.210189 | ubuntu-noble | +## T1072 third party software 2026-06-02 05:54:54.210327 | ubuntu-noble | +## https://rubygems.org 2026-06-02 05:54:54.210447 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 05:54:54.210554 | ubuntu-noble | + 2026-06-02 05:54:54.210666 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 05:54:54.210779 | ubuntu-noble | +## T1072 third party software 2026-06-02 05:54:54.210891 | ubuntu-noble | +## https://luarocks.org 2026-06-02 05:54:54.211007 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 05:54:54.211122 | ubuntu-noble | + 2026-06-02 05:54:54.211233 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 05:54:54.211367 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 05:54:54.211487 | ubuntu-noble | +## T1072 third party software 2026-06-02 05:54:54.211603 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 05:54:54.211718 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 05:54:54.211823 | ubuntu-noble | + 2026-06-02 05:54:54.211934 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 05:54:54.212038 | ubuntu-noble | + 2026-06-02 05:54:54.212156 | ubuntu-noble | +## GDS specific secrets 2026-06-02 05:54:54.212288 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 05:54:54.212402 | ubuntu-noble | + 2026-06-02 05:54:54.212516 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 05:54:54.212637 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 05:54:54.212756 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 05:54:54.212864 | ubuntu-noble | + 2026-06-02 05:54:54.212978 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 05:54:54.213110 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 05:54:54.213223 | ubuntu-noble | + 2026-06-02 05:54:54.213346 | ubuntu-noble | +## Salt 2026-06-02 05:54:54.213464 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 05:54:54.213581 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 05:54:54.213695 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 05:54:54.213807 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 05:54:54.213913 | ubuntu-noble | + 2026-06-02 05:54:54.214023 | ubuntu-noble | +## Otter 2026-06-02 05:54:54.214146 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 05:54:54.214291 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 05:54:54.214403 | ubuntu-noble | + 2026-06-02 05:54:54.214516 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 05:54:54.214628 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 05:54:54.214743 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 05:54:54.214855 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 05:54:54.214965 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.215080 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 05:54:54.215203 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 05:54:54.215330 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 05:54:54.215438 | ubuntu-noble | + 2026-06-02 05:54:54.215553 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 05:54:54.215666 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 05:54:54.215775 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.215885 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 05:54:54.215989 | ubuntu-noble | + 2026-06-02 05:54:54.216163 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 05:54:54.216310 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 05:54:54.216427 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.216545 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 05:54:54.216652 | ubuntu-noble | + 2026-06-02 05:54:54.216766 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 05:54:54.216873 | ubuntu-noble | + 2026-06-02 05:54:54.216987 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 05:54:54.217107 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.217223 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 05:54:54.218261 | ubuntu-noble | + 2026-06-02 05:54:54.218273 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 05:54:54.218277 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 05:54:54.218281 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.218285 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 05:54:54.218288 | ubuntu-noble | + 2026-06-02 05:54:54.218292 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 05:54:54.218296 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 05:54:54.218299 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.218304 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 05:54:54.218353 | ubuntu-noble | + 2026-06-02 05:54:54.218473 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 05:54:54.218588 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 05:54:54.218697 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.218811 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 05:54:54.218918 | ubuntu-noble | + 2026-06-02 05:54:54.219033 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 05:54:54.219157 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 05:54:54.219286 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.219407 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 05:54:54.219513 | ubuntu-noble | + 2026-06-02 05:54:54.219627 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 05:54:54.219741 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 05:54:54.219854 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.219969 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 05:54:54.220077 | ubuntu-noble | + 2026-06-02 05:54:54.220217 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 05:54:54.220346 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 05:54:54.220466 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 05:54:54.220585 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 05:54:54.220700 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 05:54:54.220811 | ubuntu-noble | +### macOS 2026-06-02 05:54:54.220927 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 05:54:54.221035 | ubuntu-noble | + 2026-06-02 05:54:54.221156 | ubuntu-noble | +## Docker 2026-06-02 05:54:54.221281 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 05:54:54.221397 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 05:54:54.221509 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 05:54:54.221621 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 05:54:54.221732 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 05:54:54.221844 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 05:54:54.221958 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 05:54:54.222070 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 05:54:54.222195 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 05:54:54.222332 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 05:54:54.222444 | ubuntu-noble | + 2026-06-02 05:54:54.222557 | ubuntu-noble | +## Virtualization stuff 2026-06-02 05:54:54.222673 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 05:54:54.222787 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 05:54:54.222900 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 05:54:54.223011 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 05:54:54.223135 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 05:54:54.223270 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 05:54:54.223390 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 05:54:54.223499 | ubuntu-noble | + 2026-06-02 05:54:54.223615 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 05:54:54.223723 | ubuntu-noble | + 2026-06-02 05:54:54.223837 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 05:54:54.223951 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 05:54:54.224066 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 05:54:54.224207 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 05:54:54.224338 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 05:54:54.224455 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 05:54:54.224576 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 05:54:54.224689 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 05:54:54.224801 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 05:54:54.224914 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 05:54:54.225026 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 05:54:54.225154 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 05:54:54.225293 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 05:54:54.227263 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 05:54:54.227275 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 05:54:54.227279 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 05:54:54.227283 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 05:54:54.227287 | ubuntu-noble | + 2026-06-02 05:54:54.227290 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 05:54:54.227294 | ubuntu-noble | + 2026-06-02 05:54:54.227298 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 05:54:54.227302 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 05:54:54.227306 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 05:54:54.227310 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 05:54:54.227314 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 05:54:54.227317 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 05:54:54.227321 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 05:54:54.227325 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 05:54:54.227330 | ubuntu-noble | + 2026-06-02 05:54:54.227334 | ubuntu-noble | +### qemu on macOS 2026-06-02 05:54:54.227338 | ubuntu-noble | + 2026-06-02 05:54:54.227342 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 05:54:54.227385 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 05:54:54.227504 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 05:54:54.227619 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 05:54:54.227734 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 05:54:54.227840 | ubuntu-noble | + 2026-06-02 05:54:54.227961 | ubuntu-noble | +## Kubelet 2026-06-02 05:54:54.228072 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 05:54:54.228193 | ubuntu-noble | + 2026-06-02 05:54:54.228317 | ubuntu-noble | +# ipc system call 2026-06-02 05:54:54.228435 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 05:54:54.228543 | ubuntu-noble | + 2026-06-02 05:54:54.228653 | ubuntu-noble | +## msgctl 2026-06-02 05:54:54.228770 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 05:54:54.228878 | ubuntu-noble | +## msgget 2026-06-02 05:54:54.228999 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 05:54:54.229132 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:54.229262 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 05:54:54.229390 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 05:54:54.229499 | ubuntu-noble | + 2026-06-02 05:54:54.229613 | ubuntu-noble | +## semctl 2026-06-02 05:54:54.229731 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 05:54:54.229839 | ubuntu-noble | +## semget 2026-06-02 05:54:54.229960 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 05:54:54.230072 | ubuntu-noble | +## semop 2026-06-02 05:54:54.230207 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 05:54:54.230336 | ubuntu-noble | +## semtimedop 2026-06-02 05:54:54.230465 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 05:54:54.230582 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:54.230702 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 05:54:54.230820 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 05:54:54.230947 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 05:54:54.231073 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 05:54:54.231210 | ubuntu-noble | + 2026-06-02 05:54:54.231338 | ubuntu-noble | +## shmctl 2026-06-02 05:54:54.231464 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 05:54:54.231577 | ubuntu-noble | +## shmget 2026-06-02 05:54:54.231696 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 05:54:54.231812 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 05:54:54.231979 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 05:54:54.232121 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 05:54:54.232268 | ubuntu-noble | + 2026-06-02 05:54:54.232398 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 05:54:54.232508 | ubuntu-noble | + 2026-06-02 05:54:54.232623 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 05:54:54.232729 | ubuntu-noble | + 2026-06-02 05:54:54.232842 | ubuntu-noble | +## Common Shells 2026-06-02 05:54:54.232957 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 05:54:54.233069 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 05:54:54.233214 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 05:54:54.233353 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 05:54:54.233471 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 05:54:54.233582 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 05:54:54.233691 | ubuntu-noble | + 2026-06-02 05:54:54.233804 | ubuntu-noble | +## Root command executions 2026-06-02 05:54:54.233926 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 05:54:54.234034 | ubuntu-noble | + 2026-06-02 05:54:54.234162 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 05:54:54.234294 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 05:54:54.234407 | ubuntu-noble | + 2026-06-02 05:54:54.234522 | ubuntu-noble | +## File Access 2026-06-02 05:54:54.234638 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 05:54:54.234763 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 05:54:54.234888 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 05:54:54.234996 | ubuntu-noble | + 2026-06-02 05:54:54.235118 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 05:54:54.235240 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 05:54:54.235377 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 05:54:54.235489 | ubuntu-noble | + 2026-06-02 05:54:54.235603 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 05:54:54.235721 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 05:54:54.235853 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 05:54:54.235961 | ubuntu-noble | + 2026-06-02 05:54:54.236074 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 05:54:54.236217 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 05:54:54.236350 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 05:54:54.236470 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 05:54:54.236582 | ubuntu-noble | +### bit API. 2026-06-02 05:54:54.236711 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 05:54:54.236822 | ubuntu-noble | + 2026-06-02 05:54:54.236943 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 05:54:54.237054 | ubuntu-noble | + 2026-06-02 05:54:54.237174 | ubuntu-noble | +##-e 2 2026-06-02 05:54:54.237292 | ubuntu-noble | 2026-06-02 05:54:54.237549 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780379693.3584442-2905-120264036635140/.source.rules", "state": "file", "uid": 0} 2026-06-02 05:54:54.237689 | ubuntu-noble | 2026-06-02 05:54:54.237821 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 05:54:54.942990 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ActiveEnterTimestampMonotonic": "8508197936", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:47 UTC", "AssertTimestampMonotonic": "8508165032", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "27731000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ConditionTimestampMonotonic": "8508164983", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2666", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ExecMainStartTimestampMonotonic": "8508176683", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2665 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2665 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2669 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2669 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:47 UTC", "InactiveExitTimestampMonotonic": "8508168219", "InvocationID": "621696a603d4456e8e44eb224e7936bf", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2666", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3520294912", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2293760", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 05:54:47 UTC", "StateChangeTimestampMonotonic": "8508197936", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:54.948625 | ubuntu-noble | 2026-06-02 05:54:54.949086 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 05:54:55.437796 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007826", "end": "2026-06-02 05:54:55.398883", "msg": "", "rc": 0, "start": "2026-06-02 05:54:55.391057", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 05:54:55.438491 | ubuntu-noble | 2026-06-02 05:54:55.438533 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 05:54:55.780357 | ubuntu-noble | --- before 2026-06-02 05:54:55.780415 | ubuntu-noble | +++ after 2026-06-02 05:54:55.780425 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 05:54:55.780433 | ubuntu-noble | { 2026-06-02 05:54:55.780440 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 05:54:55.780447 | ubuntu-noble | - "state": "file" 2026-06-02 05:54:55.780455 | ubuntu-noble | + "state": "absent" 2026-06-02 05:54:55.780461 | ubuntu-noble | } 2026-06-02 05:54:55.780469 | ubuntu-noble | 2026-06-02 05:54:55.780478 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 05:54:55.780487 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 05:54:55.780504 | ubuntu-noble | 2026-06-02 05:54:55.780512 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 05:54:56.554007 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ActiveEnterTimestampMonotonic": "8508197936", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:47 UTC", "AssertTimestampMonotonic": "8508165032", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "29222000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ConditionTimestampMonotonic": "8508164983", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2666", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:47 UTC", "ExecMainStartTimestampMonotonic": "8508176683", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2665 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2665 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2669 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:47 UTC] ; stop_time=[Tue 2026-06-02 05:54:47 UTC] ; pid=2669 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:47 UTC", "InactiveExitTimestampMonotonic": "8508168219", "InvocationID": "621696a603d4456e8e44eb224e7936bf", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2666", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3510571008", "MemoryCurrent": "520192", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2293760", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 05:54:47 UTC", "StateChangeTimestampMonotonic": "8508197936", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:56.562537 | ubuntu-noble | 2026-06-02 05:54:56.562570 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 05:54:56.948308 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.049506", "end": "2026-06-02 05:54:56.887510", "msg": "", "rc": 0, "start": "2026-06-02 05:54:56.838004", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 3070\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1058\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 3070\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1056\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 3070", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1058", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 3070", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1056", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 05:54:56.948357 | ubuntu-noble | 2026-06-02 05:54:56.948364 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 05:54:57.655936 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 05:54:56 UTC", "ActiveEnterTimestampMonotonic": "8516742604", "ActiveExitTimestamp": "Tue 2026-06-02 05:54:56 UTC", "ActiveExitTimestampMonotonic": "8516538538", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 05:54:56 UTC", "AssertTimestampMonotonic": "8516586789", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "168654000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 05:54:56 UTC", "ConditionTimestampMonotonic": "8516586702", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3952", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "3070", "ExecMainStartTimestamp": "Tue 2026-06-02 05:54:56 UTC", "ExecMainStartTimestampMonotonic": "8516629498", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 05:54:56 UTC] ; stop_time=[Tue 2026-06-02 05:54:56 UTC] ; pid=3069 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 05:54:56 UTC] ; stop_time=[Tue 2026-06-02 05:54:56 UTC] ; pid=3069 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 05:54:56 UTC] ; stop_time=[Tue 2026-06-02 05:54:56 UTC] ; pid=3073 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 05:54:56 UTC] ; stop_time=[Tue 2026-06-02 05:54:56 UTC] ; pid=3073 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 05:54:56 UTC", "InactiveEnterTimestampMonotonic": "8516584809", "InactiveExitTimestamp": "Tue 2026-06-02 05:54:56 UTC", "InactiveExitTimestampMonotonic": "8516595726", "InvocationID": "30614c3da803425f8d15c5822d207b93", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "3070", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3513192448", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2142208", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 05:54:56 UTC", "StateChangeTimestampMonotonic": "8516742604", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 05:54:57.658108 | ubuntu-noble | 2026-06-02 05:54:57.658362 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 05:54:57.658550 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 05:54:57.658708 | ubuntu-noble | 2026-06-02 05:54:57.742073 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 05:54:57.743057 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 05:54:57.869871 | ubuntu-noble | ok: Runtime: 0:00:19.504684 2026-06-02 05:54:57.898033 | 2026-06-02 05:54:57.898235 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 05:54:58.623333 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:58.634472 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:58.586602 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 05:54:58.597994 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:59.112413 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:59.113055 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:59.136882 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:59.142632 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 05:54:59.142689 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:54:59.081050 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 05:54:59.081691 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 05:54:59.102924 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 05:54:59.108508 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 05:54:59.108608 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 05:55:00.475038 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 05:55:00.476694 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 05:55:00.477920 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:55:00.477929 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:55:00.477937 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:55:00.477944 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:55:00.477950 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:55:00.477956 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 05:55:00.477961 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:55:00.477966 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 05:55:00.477971 | debian-bookworm | 2026-06-02 05:55:00.478073 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:55:00.478080 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 05:55:00.478085 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:55:00.478090 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 05:55:00.478095 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:55:00.478101 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:55:00.478106 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:55:00.478111 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:55:00.478116 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:55:00.478122 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:55:00.478127 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:55:00.478132 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:55:00.478137 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:55:00.478142 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:55:00.478147 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:55:00.478152 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:55:00.478157 | debian-bookworm | 2026-06-02 05:55:00.478251 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:55:00.642306 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 05:55:00.644172 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 05:55:00.646300 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 05:55:00.646325 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 05:55:00.646335 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 05:55:00.646342 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 05:55:00.646349 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 05:55:00.646355 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 05:55:00.646361 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 05:55:00.646367 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 05:55:00.646374 | ubuntu-noble | 2026-06-02 05:55:00.646381 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 05:55:00.646387 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 05:55:00.646393 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 05:55:00.646400 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 05:55:00.646406 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 05:55:00.646412 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 05:55:00.646418 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 05:55:00.646425 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 05:55:00.646431 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 05:55:00.646438 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 05:55:00.646444 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 05:55:00.646450 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 05:55:00.646456 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 05:55:00.646463 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 05:55:00.646469 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 05:55:00.646475 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:55:00.646482 | ubuntu-noble | 2026-06-02 05:55:00.646496 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 05:55:00.900608 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 05:55:00.915331 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 05:55:00.915959 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 05:55:00.916525 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 05:55:00.916951 | ubuntu-noble | registered third-party plugins: 2026-06-02 05:55:00.917467 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 05:55:00.918219 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 05:55:00.918286 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 05:55:00.714799 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 05:55:00.731320 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 05:55:00.731942 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 05:55:00.732504 | debian-bookworm | using: pytest-8.4.2 2026-06-02 05:55:00.732973 | debian-bookworm | registered third-party plugins: 2026-06-02 05:55:00.733837 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 05:55:00.734278 | debian-bookworm | rootdir: /home/zuul 2026-06-02 05:55:00.734710 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 05:55:01.938643 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 05:55:01.938718 | ubuntu-noble | 2026-06-02 05:55:01.725758 | debian-bookworm | collecting ... collected 6 items 2026-06-02 05:55:01.726195 | debian-bookworm | 2026-06-02 05:55:05.944630 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 05:55:05.980619 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 05:55:06.618319 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 05:55:06.685055 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 05:55:08.436413 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 05:55:09.702618 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 05:55:13.344919 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 05:55:14.570241 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 05:55:14.653668 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 05:55:14.654170 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 05:55:14.654278 | debian-bookworm | 2026-06-02 05:55:14.654392 | debian-bookworm | ============================== 6 passed in 13.88s ============================== 2026-06-02 05:55:14.695587 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 05:55:14.695702 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 05:55:14.695734 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 05:55:15.022175 | debian-bookworm | ok: Runtime: 0:00:16.509113 2026-06-02 05:55:15.560076 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 05:55:17.260653 | ubuntu-noble | ok: Runtime: 0:00:18.930539 2026-06-02 05:55:17.268710 | 2026-06-02 05:55:17.268832 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 05:55:16.997317 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 05:55:17.088340 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 05:55:17.088422 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 05:55:17.088447 | ubuntu-noble | 2026-06-02 05:55:17.089375 | ubuntu-noble | ============================== 6 passed in 16.12s ============================== 2026-06-02 05:55:17.141550 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 05:55:17.142063 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 05:55:17.143073 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 05:55:17.834731 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:55:17.835929 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:55:17.856171 | 2026-06-02 05:55:17.856316 | PLAY RECAP 2026-06-02 05:55:17.856386 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 05:55:17.856428 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 05:55:17.856454 | 2026-06-02 05:55:18.004828 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 05:55:18.008615 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 05:55:18.772726 | 2026-06-02 05:55:18.772918 | PLAY [Collect container logs] 2026-06-02 05:55:18.802271 | 2026-06-02 05:55:18.802557 | TASK [Create container log directory] 2026-06-02 05:55:19.436061 | debian-bookworm | changed 2026-06-02 05:55:19.470737 | ubuntu-noble | changed 2026-06-02 05:55:19.478257 | 2026-06-02 05:55:19.478438 | TASK [Capture container overview] 2026-06-02 05:55:20.054686 | debian-bookworm | ok: Runtime: 0:00:00.010090 2026-06-02 05:55:20.090123 | ubuntu-noble | ok: Runtime: 0:00:00.006526 2026-06-02 05:55:20.101328 | 2026-06-02 05:55:20.101465 | TASK [List containers] 2026-06-02 05:55:20.683393 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 05:55:20.683693 | debian-bookworm | { 2026-06-02 05:55:20.683732 | debian-bookworm | "failed_when_result": false, 2026-06-02 05:55:20.683759 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 05:55:20.683785 | debian-bookworm | "rc": 2 2026-06-02 05:55:20.683805 | debian-bookworm | } 2026-06-02 05:55:20.689168 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 05:55:20.689341 | ubuntu-noble | { 2026-06-02 05:55:20.689381 | ubuntu-noble | "failed_when_result": false, 2026-06-02 05:55:20.689406 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 05:55:20.689428 | ubuntu-noble | "rc": 2 2026-06-02 05:55:20.689448 | ubuntu-noble | } 2026-06-02 05:55:20.694426 | 2026-06-02 05:55:20.694529 | LOOP [Save per-container logs] 2026-06-02 05:55:20.792528 | 2026-06-02 05:55:20.792756 | LOOP [Save per-container inspect (state and health)] 2026-06-02 05:55:20.892467 | 2026-06-02 05:55:20.892763 | TASK [Capture netbox systemd unit journal] 2026-06-02 05:55:21.467059 | debian-bookworm | ok: Runtime: 0:00:00.025414 2026-06-02 05:55:21.480352 | ubuntu-noble | ok: Runtime: 0:00:00.017671 2026-06-02 05:55:21.488648 | 2026-06-02 05:55:21.488781 | TASK [Capture netbox service state] 2026-06-02 05:55:22.083870 | debian-bookworm | ok: Runtime: 0:00:00.036002 2026-06-02 05:55:22.096253 | ubuntu-noble | ok: Runtime: 0:00:00.034395 2026-06-02 05:55:22.105008 | 2026-06-02 05:55:22.105161 | TASK [Capture docker compose version] 2026-06-02 05:55:22.674051 | debian-bookworm | ok: Runtime: 0:00:00.010625 2026-06-02 05:55:22.679519 | ubuntu-noble | ok: Runtime: 0:00:00.010970 2026-06-02 05:55:22.684438 | 2026-06-02 05:55:22.684537 | TASK [Open container log permissions] 2026-06-02 05:55:23.003392 | debian-bookworm | changed 2026-06-02 05:55:23.067864 | ubuntu-noble | changed 2026-06-02 05:55:23.070372 | 2026-06-02 05:55:23.070495 | PLAY RECAP 2026-06-02 05:55:23.070581 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 05:55:23.070633 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 05:55:23.070669 | 2026-06-02 05:55:23.201339 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 05:55:23.204633 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 05:55:23.965093 | 2026-06-02 05:55:23.965264 | PLAY [Base post-fetch] 2026-06-02 05:55:23.992853 | 2026-06-02 05:55:23.993049 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 05:55:24.067042 | ubuntu-noble | ok 2026-06-02 05:55:24.082415 | debian-bookworm | ok 2026-06-02 05:55:24.087630 | 2026-06-02 05:55:24.087786 | TASK [fetch-output : Set log path for single node] 2026-06-02 05:55:24.114583 | debian-bookworm | skipping: Conditional result was False 2026-06-02 05:55:24.125607 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 05:55:24.131537 | 2026-06-02 05:55:24.131656 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 05:55:24.614378 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/logs/debian-bookworm" 2026-06-02 05:55:24.626164 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/logs/ubuntu-noble" 2026-06-02 05:55:24.883973 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/artifacts" 2026-06-02 05:55:24.885386 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/artifacts" 2026-06-02 05:55:25.144007 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/docs" 2026-06-02 05:55:25.161002 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/400afce5f9814af1b18787256ed88fcb/work/docs" 2026-06-02 05:55:25.161240 | ubuntu-noble -> localhost | changed: All items complete 2026-06-02 05:55:25.161281 | 2026-06-02 05:55:25.178243 | 2026-06-02 05:55:25.178508 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 05:55:26.006003 | debian-bookworm | changed: 2026-06-02 05:55:26.006413 | debian-bookworm | .d..t...... ./ 2026-06-02 05:55:26.006583 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 05:55:26.006631 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 05:55:26.006665 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 05:55:26.006698 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 05:55:26.006728 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 05:55:26.006757 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 05:55:26.006785 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 05:55:26.006815 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 05:55:26.025569 | ubuntu-noble | changed: 2026-06-02 05:55:26.025739 | ubuntu-noble | .d..t...... ./ 2026-06-02 05:55:26.025793 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 05:55:26.025833 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 05:55:26.025861 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 05:55:26.025886 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 05:55:26.025909 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 05:55:26.025933 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 05:55:26.025956 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 05:55:26.025978 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 05:55:26.619652 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 05:55:26.641516 | debian-bookworm | ok 2026-06-02 05:55:27.206528 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 05:55:27.262470 | debian-bookworm | ok 2026-06-02 05:55:27.262779 | debian-bookworm | changed: All items complete 2026-06-02 05:55:27.262829 | 2026-06-02 05:55:27.286393 | 2026-06-02 05:55:27.286534 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 05:55:27.842989 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.015925 2026-06-02 05:55:28.155935 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.013435 2026-06-02 05:55:28.180227 | 2026-06-02 05:55:28.180371 | PLAY RECAP 2026-06-02 05:55:28.180428 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 05:55:28.180462 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 05:55:28.180484 | 2026-06-02 05:55:28.317749 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 05:55:28.319209 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 05:55:29.104035 | 2026-06-02 05:55:29.104209 | PLAY [Base post] 2026-06-02 05:55:29.117702 | 2026-06-02 05:55:29.117883 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 05:55:29.927976 | debian-bookworm | changed 2026-06-02 05:55:30.035425 | ubuntu-noble | changed 2026-06-02 05:55:30.048784 | 2026-06-02 05:55:30.048918 | PLAY RECAP 2026-06-02 05:55:30.049007 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 05:55:30.049046 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 05:55:30.049071 | 2026-06-02 05:55:30.180140 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 05:55:30.183976 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 05:55:31.011522 | 2026-06-02 05:55:31.011826 | PLAY [Base post-logs] 2026-06-02 05:55:31.024446 | 2026-06-02 05:55:31.024615 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 05:55:31.538584 | localhost | changed 2026-06-02 05:55:31.551478 | 2026-06-02 05:55:31.551652 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 05:55:31.587938 | localhost | ok 2026-06-02 05:55:31.591931 | 2026-06-02 05:55:31.592043 | TASK [Set zuul-log-path fact] 2026-06-02 05:55:31.608078 | localhost | ok 2026-06-02 05:55:31.617727 | 2026-06-02 05:55:31.617854 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 05:55:31.656430 | localhost | ok 2026-06-02 05:55:31.663804 | 2026-06-02 05:55:31.663988 | TASK [upload-logs : Create log directories] 2026-06-02 05:55:32.221464 | localhost | changed 2026-06-02 05:55:32.229103 | 2026-06-02 05:55:32.229347 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 05:55:32.792661 | localhost -> localhost | ok: Runtime: 0:00:00.007667 2026-06-02 05:55:32.797178 | 2026-06-02 05:55:32.797330 | TASK [upload-logs : Upload logs to log server] 2026-06-02 05:55:33.391648 | localhost | Output suppressed because no_log was given 2026-06-02 05:55:33.393671 | 2026-06-02 05:55:33.394098 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 05:55:33.453506 | localhost | skipping: Conditional result was False 2026-06-02 05:55:33.458474 | localhost | skipping: Conditional result was False 2026-06-02 05:55:33.464601 | 2026-06-02 05:55:33.464768 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 05:55:33.514879 | localhost | skipping: Conditional result was False 2026-06-02 05:55:33.515402 | 2026-06-02 05:55:33.519737 | localhost | skipping: Conditional result was False 2026-06-02 05:55:33.524821 | 2026-06-02 05:55:33.524958 | LOOP [upload-logs : Upload console log and json output]