2025-11-10 23:58:42.883215 | Job console starting 2025-11-10 23:58:42.918587 | Updating git repos 2025-11-10 23:58:42.948589 | Cloning repos into workspace 2025-11-10 23:58:42.979447 | Restoring repo states 2025-11-10 23:58:42.991092 | Merging changes 2025-11-10 23:58:43.551669 | Checking out repos 2025-11-10 23:58:43.687937 | Preparing playbooks 2025-11-10 23:58:44.264300 | Running Ansible setup 2025-11-10 23:58:51.272877 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2025-11-10 23:58:51.963175 | 2025-11-10 23:58:51.963292 | PLAY [Base pre] 2025-11-10 23:58:51.978371 | 2025-11-10 23:58:51.978470 | TASK [Setup log path fact] 2025-11-10 23:58:52.005501 | centos-9-stream | ok 2025-11-10 23:58:52.018722 | 2025-11-10 23:58:52.018821 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-11-10 23:58:52.055235 | centos-9-stream | ok 2025-11-10 23:58:52.062803 | 2025-11-10 23:58:52.062904 | TASK [emit-job-header : Print job information] 2025-11-10 23:58:52.103679 | # Job Information 2025-11-10 23:58:52.103957 | Ansible Version: 2.16.14 2025-11-10 23:58:52.104052 | Job: ansible-collection-services-molecule-auditd 2025-11-10 23:58:52.104158 | Pipeline: check 2025-11-10 23:58:52.104205 | Executor: 521e9411259a 2025-11-10 23:58:52.104246 | Triggered by: https://github.com/osism/ansible-collection-services/pull/1994 2025-11-10 23:58:52.104286 | Event ID: dd3f3300-be90-11f0-8bdc-d1b8d8eff560 2025-11-10 23:58:52.110512 | 2025-11-10 23:58:52.110658 | LOOP [emit-job-header : Print node information] 2025-11-10 23:58:52.201447 | centos-9-stream | ok: 2025-11-10 23:58:52.201654 | centos-9-stream | # Node Information 2025-11-10 23:58:52.201688 | centos-9-stream | Inventory Hostname: centos-9-stream 2025-11-10 23:58:52.201713 | centos-9-stream | Hostname: np0000149637 2025-11-10 23:58:52.201734 | centos-9-stream | Username: zuul 2025-11-10 23:58:52.201754 | centos-9-stream | Distro: CentOS 9 2025-11-10 23:58:52.201781 | centos-9-stream | Provider: regiocloud-a 2025-11-10 23:58:52.201802 | centos-9-stream | Region: 2025-11-10 23:58:52.201823 | centos-9-stream | Label: centos-9-stream 2025-11-10 23:58:52.201842 | centos-9-stream | Product Name: OpenStack Nova 2025-11-10 23:58:52.201863 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe38:f5d9 2025-11-10 23:58:52.247633 | centos-9-stream | ok: 2025-11-10 23:58:52.247726 | centos-9-stream | # Node Information 2025-11-10 23:58:52.247757 | centos-9-stream | Inventory Hostname: debian-bookworm 2025-11-10 23:58:52.247782 | centos-9-stream | Hostname: debian 2025-11-10 23:58:52.247807 | centos-9-stream | Username: zuul 2025-11-10 23:58:52.247828 | centos-9-stream | Distro: Debian 12.12 2025-11-10 23:58:52.247848 | centos-9-stream | Provider: regiocloud-a 2025-11-10 23:58:52.247868 | centos-9-stream | Region: 2025-11-10 23:58:52.247887 | centos-9-stream | Label: debian-bookworm 2025-11-10 23:58:52.247906 | centos-9-stream | Product Name: OpenStack Nova 2025-11-10 23:58:52.247925 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe83:18c1 2025-11-10 23:58:52.296903 | centos-9-stream | ok: 2025-11-10 23:58:52.297098 | centos-9-stream | # Node Information 2025-11-10 23:58:52.297289 | centos-9-stream | Inventory Hostname: ubuntu-jammy 2025-11-10 23:58:52.297379 | centos-9-stream | Hostname: ubuntu 2025-11-10 23:58:52.297434 | centos-9-stream | Username: zuul 2025-11-10 23:58:52.297479 | centos-9-stream | Distro: Ubuntu 22.04 2025-11-10 23:58:52.297520 | centos-9-stream | Provider: regiocloud-a 2025-11-10 23:58:52.297562 | centos-9-stream | Region: 2025-11-10 23:58:52.297604 | centos-9-stream | Label: ubuntu-jammy 2025-11-10 23:58:52.297688 | centos-9-stream | Product Name: OpenStack Nova 2025-11-10 23:58:52.297736 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fea4:8a9a 2025-11-10 23:58:52.343953 | centos-9-stream | ok: 2025-11-10 23:58:52.344115 | centos-9-stream | # Node Information 2025-11-10 23:58:52.344181 | centos-9-stream | Inventory Hostname: ubuntu-noble 2025-11-10 23:58:52.344227 | centos-9-stream | Hostname: ubuntu 2025-11-10 23:58:52.344289 | centos-9-stream | Username: zuul 2025-11-10 23:58:52.344344 | centos-9-stream | Distro: Ubuntu 24.04 2025-11-10 23:58:52.344386 | centos-9-stream | Provider: regiocloud-a 2025-11-10 23:58:52.344428 | centos-9-stream | Region: 2025-11-10 23:58:52.344469 | centos-9-stream | Label: ubuntu-noble 2025-11-10 23:58:52.344571 | centos-9-stream | Product Name: OpenStack Nova 2025-11-10 23:58:52.344620 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:feaa:5a8e 2025-11-10 23:58:52.374583 | 2025-11-10 23:58:52.374690 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2025-11-10 23:58:52.784841 | centos-9-stream -> localhost | changed 2025-11-10 23:58:52.801662 | 2025-11-10 23:58:52.801815 | TASK [log-inventory : Copy ansible inventory to logs dir] 2025-11-10 23:58:53.767004 | ubuntu-noble -> localhost | changed 2025-11-10 23:58:53.768726 | ubuntu-jammy -> localhost | ok 2025-11-10 23:58:53.810028 | centos-9-stream -> localhost | ok 2025-11-10 23:58:53.873025 | debian-bookworm -> localhost | ok 2025-11-10 23:58:53.905405 | 2025-11-10 23:58:53.905501 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2025-11-10 23:58:54.202013 | centos-9-stream -> localhost | ok 2025-11-10 23:58:54.215491 | 2025-11-10 23:58:54.215637 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2025-11-10 23:58:54.243074 | centos-9-stream | ok 2025-11-10 23:58:54.256208 | debian-bookworm | ok 2025-11-10 23:58:54.260441 | ubuntu-jammy | ok 2025-11-10 23:58:54.264915 | ubuntu-noble | ok 2025-11-10 23:58:54.290403 | centos-9-stream | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-11-10 23:58:54.290469 | debian-bookworm | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-11-10 23:58:54.290497 | ubuntu-jammy | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-11-10 23:58:54.290519 | ubuntu-noble | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-11-10 23:58:54.296294 | 2025-11-10 23:58:54.296372 | TASK [add-build-sshkey : Create Temp SSH key] 2025-11-10 23:58:55.303658 | centos-9-stream -> localhost | Generating public/private rsa key pair. 2025-11-10 23:58:55.304030 | centos-9-stream -> localhost | Your identification has been saved in /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/work/5b6db95430af4acebf373789e7f44a77_id_rsa 2025-11-10 23:58:55.304158 | centos-9-stream -> localhost | Your public key has been saved in /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/work/5b6db95430af4acebf373789e7f44a77_id_rsa.pub 2025-11-10 23:58:55.304214 | centos-9-stream -> localhost | The key fingerprint is: 2025-11-10 23:58:55.304264 | centos-9-stream -> localhost | SHA256:CVsiKRakqm5zoXmshKDETq1K2yT+vWRJjWsKq3VW0qs zuul-build-sshkey 2025-11-10 23:58:55.304314 | centos-9-stream -> localhost | The key's randomart image is: 2025-11-10 23:58:55.304360 | centos-9-stream -> localhost | +---[RSA 3072]----+ 2025-11-10 23:58:55.304405 | centos-9-stream -> localhost | | .o | 2025-11-10 23:58:55.304451 | centos-9-stream -> localhost | | . . . | 2025-11-10 23:58:55.304494 | centos-9-stream -> localhost | |. o o o . | 2025-11-10 23:58:55.304536 | centos-9-stream -> localhost | |o... oo= . | 2025-11-10 23:58:55.304577 | centos-9-stream -> localhost | |o+ ..o+.S | 2025-11-10 23:58:55.304617 | centos-9-stream -> localhost | |O ...oo. | 2025-11-10 23:58:55.304652 | centos-9-stream -> localhost | |+B=.+*. | 2025-11-10 23:58:55.304687 | centos-9-stream -> localhost | |**B**. | 2025-11-10 23:58:55.304732 | centos-9-stream -> localhost | |=**+Eo. | 2025-11-10 23:58:55.304768 | centos-9-stream -> localhost | +----[SHA256]-----+ 2025-11-10 23:58:55.304850 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.559616 2025-11-10 23:58:55.313064 | 2025-11-10 23:58:55.313180 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2025-11-10 23:58:55.343219 | centos-9-stream | ok 2025-11-10 23:58:55.356152 | debian-bookworm | ok 2025-11-10 23:58:55.361001 | ubuntu-jammy | ok 2025-11-10 23:58:55.375109 | ubuntu-noble | ok 2025-11-10 23:58:55.395264 | centos-9-stream | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-11-10 23:58:55.395327 | debian-bookworm | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-11-10 23:58:55.395356 | ubuntu-jammy | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-11-10 23:58:55.395379 | ubuntu-noble | included: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-11-10 23:58:55.410498 | 2025-11-10 23:58:55.410577 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2025-11-10 23:58:55.432176 | centos-9-stream | skipping: Conditional result was False 2025-11-10 23:58:55.442372 | debian-bookworm | skipping: Conditional result was False 2025-11-10 23:58:55.453514 | ubuntu-jammy | skipping: Conditional result was False 2025-11-10 23:58:55.453754 | ubuntu-noble | skipping: Conditional result was False 2025-11-10 23:58:55.458138 | 2025-11-10 23:58:55.458222 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2025-11-10 23:58:56.024444 | ubuntu-jammy | changed 2025-11-10 23:58:56.031670 | centos-9-stream | changed 2025-11-10 23:58:56.069229 | ubuntu-noble | changed 2025-11-10 23:58:56.086330 | debian-bookworm | changed 2025-11-10 23:58:56.090607 | 2025-11-10 23:58:56.090689 | TASK [add-build-sshkey : Make sure user has a .ssh] 2025-11-10 23:58:56.360444 | debian-bookworm | ok 2025-11-10 23:58:56.376217 | ubuntu-jammy | ok 2025-11-10 23:58:56.380878 | ubuntu-noble | ok 2025-11-10 23:58:56.385420 | centos-9-stream | ok 2025-11-10 23:58:56.389574 | 2025-11-10 23:58:56.389654 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2025-11-10 23:58:57.021184 | ubuntu-jammy | changed 2025-11-10 23:58:57.027600 | debian-bookworm | changed 2025-11-10 23:58:57.197094 | ubuntu-noble | changed 2025-11-10 23:58:57.355419 | centos-9-stream | changed 2025-11-10 23:58:57.363105 | 2025-11-10 23:58:57.363247 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2025-11-10 23:58:57.956261 | ubuntu-jammy | changed 2025-11-10 23:58:57.995730 | debian-bookworm | changed 2025-11-10 23:58:58.015238 | ubuntu-noble | changed 2025-11-10 23:58:58.367737 | centos-9-stream | changed 2025-11-10 23:58:58.375614 | 2025-11-10 23:58:58.375742 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2025-11-10 23:58:58.411532 | centos-9-stream | skipping: Conditional result was False 2025-11-10 23:58:58.412453 | debian-bookworm | skipping: Conditional result was False 2025-11-10 23:58:58.412698 | ubuntu-jammy | skipping: Conditional result was False 2025-11-10 23:58:58.423033 | ubuntu-noble | skipping: Conditional result was False 2025-11-10 23:58:58.427532 | 2025-11-10 23:58:58.427612 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2025-11-10 23:58:58.783981 | centos-9-stream -> localhost | changed 2025-11-10 23:58:58.817480 | 2025-11-10 23:58:58.817666 | TASK [add-build-sshkey : Add back temp key] 2025-11-10 23:58:59.146990 | centos-9-stream -> localhost | Identity added: /var/lib/zuul/builds/5b6db95430af4acebf373789e7f44a77/work/5b6db95430af4acebf373789e7f44a77_id_rsa (zuul-build-sshkey) 2025-11-10 23:58:59.147269 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.014694 2025-11-10 23:58:59.153129 | 2025-11-10 23:58:59.153213 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2025-11-10 23:58:59.568315 | ubuntu-jammy | ok 2025-11-10 23:58:59.578043 | debian-bookworm | ok 2025-11-10 23:58:59.583191 | ubuntu-noble | ok 2025-11-10 23:58:59.601680 | centos-9-stream | ok 2025-11-10 23:58:59.608942 | 2025-11-10 23:58:59.609142 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2025-11-10 23:58:59.639338 | centos-9-stream | skipping: Conditional result was False 2025-11-10 23:58:59.652320 | debian-bookworm | skipping: Conditional result was False 2025-11-10 23:58:59.663558 | ubuntu-jammy | skipping: Conditional result was False 2025-11-10 23:58:59.673989 | ubuntu-noble | skipping: Conditional result was False 2025-11-10 23:58:59.695276 | 2025-11-10 23:58:59.695380 | TASK [start-zuul-console : Start zuul_console daemon.] 2025-11-10 23:59:00.145003 | ubuntu-jammy | ok 2025-11-10 23:59:00.161187 | debian-bookworm | ok 2025-11-10 23:59:00.165633 | ubuntu-noble | ok 2025-11-10 23:59:00.179129 | centos-9-stream | ok 2025-11-10 23:59:00.200110 | 2025-11-10 23:59:00.200216 | TASK [validate-host : Define zuul_info_dir fact] 2025-11-10 23:59:00.244643 | centos-9-stream | ok 2025-11-10 23:59:00.250907 | debian-bookworm | ok 2025-11-10 23:59:00.255203 | ubuntu-jammy | ok 2025-11-10 23:59:00.262091 | ubuntu-noble | ok 2025-11-10 23:59:00.266109 | 2025-11-10 23:59:00.266205 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2025-11-10 23:59:00.544078 | centos-9-stream -> localhost | ok 2025-11-10 23:59:00.555913 | 2025-11-10 23:59:00.556088 | TASK [validate-host : Collect information about the host] 2025-11-10 23:59:01.635201 | debian-bookworm | ok 2025-11-10 23:59:01.652240 | centos-9-stream | ok 2025-11-10 23:59:01.699453 | ubuntu-noble | ok 2025-11-10 23:59:01.752277 | ubuntu-jammy | ok 2025-11-10 23:59:01.768012 | 2025-11-10 23:59:01.768190 | TASK [validate-host : Sanitize hostname] 2025-11-10 23:59:01.830623 | centos-9-stream | ok 2025-11-10 23:59:01.957017 | debian-bookworm | ok 2025-11-10 23:59:01.960715 | ubuntu-jammy | ok 2025-11-10 23:59:01.964169 | ubuntu-noble | ok 2025-11-10 23:59:01.967859 | 2025-11-10 23:59:01.967956 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2025-11-10 23:59:02.500163 | centos-9-stream -> localhost | changed 2025-11-10 23:59:02.521837 | debian-bookworm -> localhost | changed 2025-11-10 23:59:02.553304 | ubuntu-jammy -> localhost | changed 2025-11-10 23:59:02.574552 | ubuntu-noble -> localhost | changed 2025-11-10 23:59:02.579317 | 2025-11-10 23:59:02.579424 | TASK [validate-host : Collect information about zuul worker] 2025-11-10 23:59:02.997532 | ubuntu-jammy | ok 2025-11-10 23:59:03.007218 | debian-bookworm | ok 2025-11-10 23:59:03.015897 | ubuntu-noble | ok 2025-11-10 23:59:03.041968 | centos-9-stream | ok 2025-11-10 23:59:03.049176 | 2025-11-10 23:59:03.049347 | TASK [validate-host : Write out all zuul information for each host] 2025-11-10 23:59:03.624370 | debian-bookworm -> localhost | changed 2025-11-10 23:59:03.636867 | ubuntu-noble -> localhost | changed 2025-11-10 23:59:03.648372 | centos-9-stream -> localhost | changed 2025-11-10 23:59:03.691073 | ubuntu-jammy -> localhost | changed 2025-11-10 23:59:03.724597 | 2025-11-10 23:59:03.724724 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2025-11-10 23:59:04.023142 | ubuntu-jammy | ok 2025-11-10 23:59:04.029210 | debian-bookworm | ok 2025-11-10 23:59:04.032202 | centos-9-stream | ok 2025-11-10 23:59:04.035751 | ubuntu-noble | ok 2025-11-10 23:59:04.040437 | 2025-11-10 23:59:04.040539 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2025-11-10 23:59:05.033886 | ubuntu-noble | changed: 2025-11-10 23:59:05.034297 | ubuntu-noble | cd+++++++++ src/ 2025-11-10 23:59:05.034357 | ubuntu-noble | cd+++++++++ src/github.com/ 2025-11-10 23:59:05.034406 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2025-11-10 23:59:05.034439 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2025-11-10 23:59:05.034471 | ubuntu-noble | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:05.816139 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:05.841782 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:05.697827 | ubuntu-jammy | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:05.722906 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:05.786192 | centos-9-stream | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:05.811879 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:06.509197 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:06.509731 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:06.519326 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:06.519402 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:06.519590 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2025-11-11 00:02:06.519738 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:06.444022 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:06.444620 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:06.454444 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:06.454499 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:06.454696 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2025-11-11 00:02:06.454805 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:06.298447 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:06.299033 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:06.308613 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:06.308676 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:06.308865 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency 2025-11-11 00:02:06.308983 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:06.482972 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:06.483610 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:06.493583 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:06.493654 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:06.493843 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency 2025-11-11 00:02:06.493977 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:07.416377 | ubuntu-jammy | INFO [delegated > dependency] Executing 2025-11-11 00:02:07.416894 | ubuntu-jammy | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:07.935837 | debian-bookworm | INFO [delegated > dependency] Executing 2025-11-11 00:02:07.936369 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:07.826255 | ubuntu-noble | INFO [delegated > dependency] Executing 2025-11-11 00:02:07.826744 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:07.780484 | ubuntu-jammy | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:07.780959 | ubuntu-jammy | config file = None 2025-11-11 00:02:07.781413 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:07.781996 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:07.782612 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-11-11 00:02:07.783184 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:07.783662 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:07.784070 | ubuntu-jammy | jinja version = 3.1.6 2025-11-11 00:02:07.784393 | ubuntu-jammy | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:07.784713 | ubuntu-jammy | No config file found; using defaults 2025-11-11 00:02:07.785215 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:07.786090 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:07.786678 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:07.787056 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:07.787616 | ubuntu-jammy | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:07.788036 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:07.788529 | ubuntu-jammy | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:07.789094 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:07.789422 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:07.791203 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:07.791611 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:07.792030 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:07.792337 | ubuntu-jammy | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:07.793207 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:07.793617 | ubuntu-jammy | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:07.793907 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:07.794313 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:07.795375 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:07.795772 | ubuntu-jammy | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:07.796075 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:07.796361 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:07.796606 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:07.796964 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:07.797412 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:07.797720 | ubuntu-jammy | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:07.798011 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:07.798260 | ubuntu-jammy | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:07.798653 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:07.799022 | ubuntu-jammy | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:07.799269 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:07.799587 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:07.799995 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:07.800294 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:07.800542 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:07.800907 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:07.809493 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:07.809809 | ubuntu-jammy | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:07.810100 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:07.810494 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:07.810724 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:07.811088 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:07.811369 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:07.812237 | ubuntu-jammy | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:07.812781 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:07.813129 | ubuntu-jammy | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:07.813541 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:07.813945 | ubuntu-jammy | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:07.814280 | ubuntu-jammy | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:07.814660 | ubuntu-jammy | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:07.814986 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:07.815418 | ubuntu-jammy | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:07.818700 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:07.819106 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:07.819600 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:07.820010 | ubuntu-jammy | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:07.821622 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:07.822015 | ubuntu-jammy | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:07.822361 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:07.822713 | ubuntu-jammy | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:07.823189 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:07.823554 | ubuntu-jammy | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:07.824753 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:07.825098 | ubuntu-jammy | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:07.827658 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:07.828007 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:07.828348 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:07.828744 | ubuntu-jammy | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:07.829019 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:07.829369 | ubuntu-jammy | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:07.829662 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:07.829945 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:07.830367 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:07.830659 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:07.830934 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:07.831287 | ubuntu-jammy | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:07.831853 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:07.832142 | ubuntu-jammy | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:07.832673 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:07.833002 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:07.833338 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:07.833702 | ubuntu-jammy | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:07.834379 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:07.834726 | ubuntu-jammy | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:07.835130 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:07.835475 | ubuntu-jammy | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:07.836429 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:07.836806 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:07.837041 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:07.837284 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:07.837533 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:07.837945 | ubuntu-jammy | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:07.838233 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:07.838611 | ubuntu-jammy | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:07.839217 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:07.839556 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:07.839800 | ubuntu-jammy | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:07.840042 | ubuntu-jammy | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:07.840282 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:07.840536 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:07.840774 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:07.841015 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:07.842253 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:07.842640 | ubuntu-jammy | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:07.842897 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:07.843235 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:07.844624 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:07.844966 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:07.845280 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:07.845619 | ubuntu-jammy | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:07.846526 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:07.846877 | ubuntu-jammy | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:07.847259 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:07.847617 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:07.848120 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:07.848456 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:07.848790 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:07.849109 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:07.850184 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:07.850539 | ubuntu-jammy | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:07.850951 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:07.851293 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:07.851524 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:07.851806 | ubuntu-jammy | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:07.852146 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:07.852462 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:07.852671 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:07.852967 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:07.853249 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:07.853582 | ubuntu-jammy | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:07.853802 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:07.854142 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:07.854734 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:07.855060 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:07.855431 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:07.855779 | ubuntu-jammy | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:07.855973 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:07.856314 | ubuntu-jammy | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:07.856857 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:07.857166 | ubuntu-jammy | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:07.857558 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:07.857881 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:07.858125 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:07.858495 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:07.858747 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:07.859081 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:07.860215 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:07.860570 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:07.860831 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:07.861158 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:07.861513 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:07.861835 | ubuntu-jammy | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:07.862071 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:07.862396 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:07.862665 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:07.862958 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:07.863385 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:07.863713 | ubuntu-jammy | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:07.865096 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:07.865466 | ubuntu-jammy | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:07.866031 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:07.866388 | ubuntu-jammy | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:07.868358 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:07.868695 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:07.869344 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:07.869709 | ubuntu-jammy | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:07.870128 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:07.870504 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:07.871842 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:07.872180 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:07.872478 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:07.872795 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:07.873047 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:07.873370 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:07.873969 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:07.874329 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:07.874512 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:07.874872 | ubuntu-jammy | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:07.875122 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:07.875425 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:07.876005 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:07.876319 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:07.878258 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:07.878642 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:07.881747 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:07.882102 | ubuntu-jammy | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:07.886421 | ubuntu-jammy | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:07.886617 | ubuntu-jammy | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:07.890571 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:07.890954 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:07.895380 | ubuntu-jammy | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-11-11 00:02:07.895841 | ubuntu-jammy | Created /home/zuul/.ansible/galaxy_token 2025-11-11 00:02:07.896099 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-11-11 00:02:08.473946 | debian-bookworm | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:08.474495 | debian-bookworm | config file = None 2025-11-11 00:02:08.475018 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:08.475611 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:08.476143 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-11-11 00:02:08.476534 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:08.476894 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-11-11 00:02:08.477374 | debian-bookworm | jinja version = 3.1.6 2025-11-11 00:02:08.477703 | debian-bookworm | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:08.478018 | debian-bookworm | No config file found; using defaults 2025-11-11 00:02:08.478569 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:08.479787 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:08.480325 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:08.486635 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:08.487325 | debian-bookworm | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:08.489163 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:08.489758 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:08.490139 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:08.490865 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:08.491352 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:08.491870 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:08.492342 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:08.493290 | debian-bookworm | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:08.493664 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:08.493905 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:08.494414 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:08.494565 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:08.495525 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:08.495870 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:08.496489 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:08.496800 | debian-bookworm | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:08.501660 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:08.501920 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:08.502395 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:08.502891 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:08.505281 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:08.505736 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:08.505984 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:08.506427 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:08.507363 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:08.507830 | debian-bookworm | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:08.510279 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:08.510545 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:08.511353 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:08.511764 | debian-bookworm | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:08.513543 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:08.513784 | debian-bookworm | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:08.515146 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:08.515566 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:08.515946 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:08.516370 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:08.516674 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:08.516919 | debian-bookworm | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:08.517195 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:08.517496 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:08.517957 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:08.518361 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:08.518689 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:08.519064 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:08.519878 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:08.520305 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:08.521051 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:08.521544 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:08.522119 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:08.522530 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:08.522891 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:08.523337 | debian-bookworm | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:08.523733 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:08.524071 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:08.525117 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:08.525551 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:08.527115 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:08.527645 | debian-bookworm | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:08.528072 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:08.528522 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:08.528838 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:08.530031 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:08.530638 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:08.530965 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:08.531328 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:08.531796 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:08.532254 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:08.532679 | debian-bookworm | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:08.533167 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:08.533764 | debian-bookworm | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:08.534078 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:08.534533 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:08.534842 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:08.535368 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:08.538695 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:08.539065 | debian-bookworm | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:08.540648 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:08.541006 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:08.541376 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:08.541844 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:08.542173 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:08.542681 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:08.544100 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:08.544530 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:08.544833 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:08.545170 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:08.545609 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:08.545925 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:08.551398 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:08.551727 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:08.552004 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:08.552656 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:08.553116 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:08.553619 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:08.555059 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:08.555486 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:08.557167 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:08.557503 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:08.557783 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:08.558375 | debian-bookworm | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:08.558653 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:08.559115 | debian-bookworm | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:08.559715 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:08.559971 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:08.560775 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:08.561294 | debian-bookworm | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:08.561619 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:08.562008 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:08.563897 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:08.564157 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:08.565368 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:08.565973 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:08.566553 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:08.567257 | debian-bookworm | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:08.575375 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:08.575672 | debian-bookworm | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:08.576045 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:08.576553 | debian-bookworm | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:08.576786 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:08.577317 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:08.578181 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:08.578720 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:08.579059 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:08.579583 | debian-bookworm | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:08.580559 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:08.581086 | debian-bookworm | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:08.581534 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:08.581923 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:08.582346 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:08.582721 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:08.584324 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:08.584748 | debian-bookworm | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:08.585077 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:08.585500 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:08.585886 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:08.586383 | debian-bookworm | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:08.586632 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:08.586935 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:08.587166 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:08.587526 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:08.587749 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:08.588053 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:08.588377 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:08.588677 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:08.589344 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:08.589660 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:08.589957 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:08.590304 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:08.590600 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:08.590896 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:08.591197 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:08.591526 | debian-bookworm | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:08.591902 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:08.298677 | ubuntu-noble | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:08.300737 | ubuntu-noble | config file = None 2025-11-11 00:02:08.300757 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:08.300762 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-11-11 00:02:08.300770 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-11-11 00:02:08.300777 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:08.301036 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-11-11 00:02:08.301345 | ubuntu-noble | jinja version = 3.1.6 2025-11-11 00:02:08.301652 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:08.301996 | ubuntu-noble | No config file found; using defaults 2025-11-11 00:02:08.302498 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:08.312429 | ubuntu-noble | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:08.312843 | ubuntu-noble | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:08.322966 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:08.323367 | ubuntu-noble | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:08.323829 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:08.324239 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:08.324547 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:08.324968 | ubuntu-noble | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:08.325260 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:08.325728 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:08.326118 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:08.326405 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:08.329808 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:08.330238 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:08.331941 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-11-11 00:02:08.332290 | ubuntu-noble | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:08.332994 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:08.333377 | ubuntu-noble | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:08.333981 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:08.334318 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:08.334722 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:08.335080 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:08.335403 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:08.335811 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:08.336446 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:08.336796 | ubuntu-noble | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:08.337148 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:08.337480 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:08.338403 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:08.338818 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:08.339135 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:08.339435 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:08.339750 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-11-11 00:02:08.340072 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:08.340505 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:08.340827 | ubuntu-noble | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:08.341174 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:08.341447 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:08.341866 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-11-11 00:02:08.342210 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:08.342460 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:08.342815 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:08.343496 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:08.343835 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:08.344090 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:08.344475 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:08.347607 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:08.347988 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:08.348346 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:08.348693 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:08.349392 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:08.349686 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:08.350272 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:08.350589 | ubuntu-noble | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:08.350939 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-11-11 00:02:08.351585 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:08.351610 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:08.352166 | ubuntu-noble | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:08.352191 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:08.352419 | ubuntu-noble | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:08.352662 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:08.352969 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:08.353814 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:08.354182 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:08.354842 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:08.355179 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:08.355388 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:08.355622 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:08.355858 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:08.356208 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:08.356908 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:08.357424 | ubuntu-noble | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:08.357436 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:08.357680 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:08.358800 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:08.359242 | ubuntu-noble | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:08.359254 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:08.359528 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:08.359755 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:08.360078 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:08.361646 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:08.362016 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:08.362239 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:08.362574 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:08.362938 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:08.363248 | ubuntu-noble | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:08.368595 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:08.368948 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:08.379088 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-11-11 00:02:08.379118 | ubuntu-noble | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-11-11 00:02:08.381749 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:08.381781 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:08.381790 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:08.381800 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:08.381808 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:08.381816 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:08.381825 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:08.382202 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:08.382486 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:08.382851 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:08.383152 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:08.383425 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:08.383783 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:08.384080 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:08.384797 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:08.385108 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:08.386538 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:08.386989 | ubuntu-noble | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:08.387295 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:08.387597 | ubuntu-noble | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:08.387917 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:08.388212 | ubuntu-noble | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:08.388512 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:08.388820 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:08.389161 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:08.389440 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:08.390065 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:08.390373 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:08.390641 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:08.390940 | ubuntu-noble | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:08.391213 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:08.391475 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:08.392290 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:08.392612 | ubuntu-noble | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:08.392862 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:08.393222 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:08.394374 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:08.394678 | ubuntu-noble | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:08.394973 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:08.395295 | ubuntu-noble | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:08.395530 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:08.395836 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:08.396090 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:08.396356 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:08.396688 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:08.396977 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:08.397479 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:08.397792 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:08.398170 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-11-11 00:02:08.398478 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:08.398811 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:08.399117 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:08.401291 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:08.401635 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:08.402231 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:08.402542 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:08.404322 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:08.404645 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:08.405045 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:08.405377 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:08.405574 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:08.405847 | ubuntu-noble | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:08.406059 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:08.406372 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:08.407687 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:08.408037 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:08.408303 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:08.408594 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:08.408832 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:08.409148 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:08.410369 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:08.410661 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:08.412088 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:08.412431 | ubuntu-noble | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:08.412690 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:08.413029 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:08.413598 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:08.413897 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:08.417397 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-11-11 00:02:08.417754 | ubuntu-noble | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:08.418015 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:08.418315 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:08.419897 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:08.420234 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:08.420860 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:08.421204 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:08.422086 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:08.422396 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:08.423035 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:08.423341 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:08.423692 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:08.424171 | ubuntu-noble | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:08.424183 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:08.424494 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:08.424788 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:08.425089 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:08.436742 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:08.437080 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:08.441683 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-11-11 00:02:08.442163 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2025-11-11 00:02:08.442182 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-11-11 00:02:08.228300 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228492 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228503 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228508 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228515 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228606 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228707 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228789 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.10.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228836 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.228901 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229018 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229075 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.41.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.41.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229179 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229245 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229311 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229371 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229441 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229490 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229551 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229612 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229671 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229733 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229794 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229854 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.229916 | centos-9-stream | WARNING Another version of 'community.dns' 3.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230000 | centos-9-stream | WARNING Another version of 'community.docker' 4.8.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.8.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230061 | centos-9-stream | WARNING Another version of 'community.general' 11.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230237 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230251 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230258 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230334 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230394 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230455 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230512 | centos-9-stream | WARNING Another version of 'community.mysql' 3.16.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.16.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230575 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230632 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230691 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230754 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230814 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.230874 | centos-9-stream | WARNING Another version of 'community.routeros' 3.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231019 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231059 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231065 | centos-9-stream | WARNING Another version of 'community.vmware' 5.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231171 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231234 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231295 | centos-9-stream | WARNING Another version of 'containers.podman' 1.18.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.18.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231363 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231417 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.36 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.36 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231480 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231541 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231605 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231666 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231729 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231790 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231848 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231907 | centos-9-stream | WARNING Another version of 'google.cloud' 1.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.231985 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.6 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.6 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232047 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232124 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232203 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_object' 1.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232266 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232332 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232387 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232449 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232510 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232572 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232635 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232696 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232755 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232814 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232876 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.232935 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233012 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233075 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233159 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233219 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233280 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233341 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233401 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233463 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233530 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233584 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233646 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.22.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.22.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233707 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233768 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233829 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233890 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.233960 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.234046 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.234108 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.234194 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.234266 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:08.248577 | centos-9-stream | INFO [delegated > dependency] Executing 2025-11-11 00:02:08.248928 | centos-9-stream | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:08.592319 | debian-bookworm | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:08.593355 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:08.593843 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:08.594124 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:08.594530 | debian-bookworm | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:08.594874 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:08.595295 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:08.595629 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:08.596000 | debian-bookworm | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:08.596421 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:08.596720 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:08.597031 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:08.597421 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:08.597688 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:08.597949 | debian-bookworm | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:08.598275 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:08.598622 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:08.599544 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:08.599811 | debian-bookworm | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:08.600522 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:08.600863 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:08.601639 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:08.602010 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:08.602401 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:08.602795 | debian-bookworm | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:08.603018 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:08.603409 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:08.603719 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:08.604133 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:08.608890 | debian-bookworm | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:08.609148 | debian-bookworm | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:08.614635 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-11-11 00:02:08.614979 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2025-11-11 00:02:08.615176 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-11-11 00:02:09.056366 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-11-11 00:02:09.060027 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-11-11 00:02:09.049541 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-11-11 00:02:09.049603 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-11-11 00:02:08.870386 | centos-9-stream | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:08.870837 | centos-9-stream | config file = None 2025-11-11 00:02:08.871493 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:08.872126 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-11-11 00:02:08.872707 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-11-11 00:02:08.873228 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:08.873633 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:08.874072 | centos-9-stream | jinja version = 3.1.6 2025-11-11 00:02:08.874417 | centos-9-stream | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:08.874757 | centos-9-stream | No config file found; using defaults 2025-11-11 00:02:08.875422 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:08.882058 | centos-9-stream | Loading collection ansible._protomatter from /home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:08.882624 | centos-9-stream | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:08.891378 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:08.892138 | centos-9-stream | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:08.894430 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:08.895221 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:08.895754 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:08.896338 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:08.898401 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:08.899002 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:08.899760 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:08.900075 | centos-9-stream | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:08.900698 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:08.901240 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:08.904839 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:08.905398 | centos-9-stream | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:08.905698 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:08.906255 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:08.908010 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:08.908334 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:08.908921 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:08.909306 | centos-9-stream | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:08.910275 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:08.910553 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:08.911285 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:08.911730 | centos-9-stream | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:08.912321 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:08.912624 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:08.913141 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:08.913423 | centos-9-stream | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:08.914030 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:08.914420 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:08.915371 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:08.915658 | centos-9-stream | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:08.916433 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:08.916741 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:08.917328 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:08.917745 | centos-9-stream | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:08.918797 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:08.919200 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:08.919509 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:08.919995 | centos-9-stream | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:08.922643 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:08.922930 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:08.923308 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:08.923878 | centos-9-stream | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:08.924223 | centos-9-stream | Loading collection ravendb.ravendb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:08.924534 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:08.925585 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:08.926146 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:08.927621 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:08.927953 | centos-9-stream | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:08.928430 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:08.928864 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:08.929435 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:08.930065 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:08.930656 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:08.931381 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:08.934180 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:08.934982 | centos-9-stream | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:08.936836 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:08.937604 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:08.938787 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:08.939188 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:08.942309 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:08.942924 | centos-9-stream | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:08.943598 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:08.944349 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:08.945604 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:08.946103 | centos-9-stream | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:08.946719 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:08.947379 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:08.947990 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:08.948770 | centos-9-stream | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:08.954795 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:08.955231 | centos-9-stream | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:08.955776 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:08.956348 | centos-9-stream | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:08.956654 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:08.957287 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:08.957603 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:08.958242 | centos-9-stream | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:08.959183 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:08.959486 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:08.960026 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:08.960487 | centos-9-stream | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:08.960762 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:08.961388 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:08.962006 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:08.962491 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:08.963345 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:08.963745 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:08.964454 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:08.964973 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:08.966019 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:08.966970 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:08.967389 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:08.968419 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:08.969016 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:08.969643 | centos-9-stream | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:08.970055 | centos-9-stream | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:08.970676 | centos-9-stream | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:08.975319 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:08.976475 | centos-9-stream | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:08.977012 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:08.977611 | centos-9-stream | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:08.978154 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:08.979692 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:08.980631 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:08.981487 | centos-9-stream | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:08.981849 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:08.982386 | centos-9-stream | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:08.982659 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:08.983364 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:08.983852 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:08.984558 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:08.985377 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:08.985816 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:08.987168 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:08.987421 | centos-9-stream | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:08.987795 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:08.988138 | centos-9-stream | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:08.988368 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:08.988722 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:08.993994 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:08.994476 | centos-9-stream | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:08.995188 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:08.995543 | centos-9-stream | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:08.996189 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:08.996541 | centos-9-stream | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:08.997899 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:08.998805 | centos-9-stream | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:08.999417 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:09.000034 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:09.000588 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:09.001274 | centos-9-stream | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:09.001678 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:09.002102 | centos-9-stream | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:09.002533 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:09.002902 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:09.003511 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:09.004052 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:09.004570 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:09.004883 | centos-9-stream | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:09.005225 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:09.005617 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:09.006020 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:09.006362 | centos-9-stream | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:09.006653 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:09.006928 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:09.007285 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:09.007533 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:09.007761 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:09.008080 | centos-9-stream | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:09.008462 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:09.008725 | centos-9-stream | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:09.017875 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:09.018487 | centos-9-stream | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:09.019179 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:09.019579 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:09.022417 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:09.023046 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:09.024105 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:09.024565 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:09.024867 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:09.025238 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:09.025502 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:09.025826 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:09.026226 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:09.026764 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:09.027321 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:09.027694 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:09.030783 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:09.031207 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:09.031768 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:09.032163 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:09.032456 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:09.032732 | centos-9-stream | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:09.033172 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:09.033453 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:09.033675 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:09.033873 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:09.034223 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:09.034463 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:09.034802 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:09.035178 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:09.044993 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:09.045648 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:09.053921 | centos-9-stream | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:09.054607 | centos-9-stream | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:09.055160 | centos-9-stream | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:09.055518 | centos-9-stream | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:09.055831 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:09.056237 | centos-9-stream | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:09.056550 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:09.056843 | centos-9-stream | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:09.057234 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:09.057540 | centos-9-stream | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:09.057830 | centos-9-stream | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:09.058177 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:09.058570 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:09.058765 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:09.058913 | centos-9-stream | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:09.059108 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:09.059277 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:09.059438 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:09.059623 | centos-9-stream | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:09.059872 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:09.060266 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:09.060659 | centos-9-stream | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:09.060997 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:09.061323 | centos-9-stream | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:09.061636 | centos-9-stream | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:09.061917 | centos-9-stream | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:09.062330 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:09.062612 | centos-9-stream | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:09.062880 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:09.063208 | centos-9-stream | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:09.063507 | centos-9-stream | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:09.063874 | centos-9-stream | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:09.064199 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:09.064470 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:09.064723 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:09.065006 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:09.065292 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:09.065750 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:09.066056 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:09.066351 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:09.066674 | centos-9-stream | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:09.067024 | centos-9-stream | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:09.067350 | centos-9-stream | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:09.067644 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:09.067912 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:09.068257 | centos-9-stream | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:09.068515 | centos-9-stream | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:09.068745 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:09.069049 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:09.069359 | centos-9-stream | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:09.069608 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:09.069854 | centos-9-stream | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:09.070134 | centos-9-stream | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:09.070437 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:09.070693 | centos-9-stream | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:09.070997 | centos-9-stream | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:09.071290 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:09.071584 | centos-9-stream | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:09.071833 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:09.072174 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:09.072474 | centos-9-stream | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:09.072766 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:09.073034 | centos-9-stream | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:09.073338 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:09.073595 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:09.073884 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:09.074190 | centos-9-stream | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:09.074466 | centos-9-stream | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:09.074721 | centos-9-stream | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:09.075023 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:09.075346 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:09.079327 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:09.079378 | centos-9-stream | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:09.079389 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:09.079397 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:09.079405 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:09.079413 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:09.079421 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:09.079429 | centos-9-stream | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:09.079435 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:09.079443 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:09.079449 | centos-9-stream | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:09.079457 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:09.079463 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:09.079471 | centos-9-stream | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:09.079478 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:09.079485 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:09.079492 | centos-9-stream | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:09.079499 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:09.079534 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:09.079769 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:09.080078 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:09.080360 | centos-9-stream | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-11-11 00:02:09.080603 | centos-9-stream | Created /home/zuul/.ansible/galaxy_token 2025-11-11 00:02:09.080818 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-11-11 00:02:09.290511 | ubuntu-jammy | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-11-11 00:02:09.290777 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-11-11 00:02:09.455177 | centos-9-stream | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-11-11 00:02:09.455975 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-11-11 00:02:09.909058 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-11-11 00:02:10.878201 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-11-11 00:02:11.592088 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-11-11 00:02:11.896288 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20251022.0/ 2025-11-11 00:02:12.405551 | ubuntu-jammy | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20251022.0 2025-11-11 00:02:12.405866 | ubuntu-jammy | Fetching a collection tarball for 'osism.commons:0.20251022.0' from Ansible Galaxy 2025-11-11 00:02:12.449058 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20251022.0/ 2025-11-11 00:02:12.742806 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20251022.0/ 2025-11-11 00:02:12.991819 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-11-11 00:02:13.622758 | centos-9-stream | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20251022.0 2025-11-11 00:02:13.623556 | centos-9-stream | Fetching a collection tarball for 'osism.commons:0.20251022.0' from Ansible Galaxy 2025-11-11 00:02:14.005797 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20251022.0 2025-11-11 00:02:14.006238 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20251022.0' from Ansible Galaxy 2025-11-11 00:02:13.820884 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20251022.0/ 2025-11-11 00:02:14.052894 | ubuntu-jammy | Validating downloaded file hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 with expected hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 2025-11-11 00:02:14.053388 | ubuntu-jammy | Collection 'osism.commons:0.20251022.0' obtained from server default https://galaxy.ansible.com/api/ 2025-11-11 00:02:14.209648 | ubuntu-jammy | Starting galaxy collection install process 2025-11-11 00:02:14.209987 | ubuntu-jammy | Process install dependency map 2025-11-11 00:02:14.210342 | ubuntu-jammy | Starting collection install process 2025-11-11 00:02:14.210699 | ubuntu-jammy | 'ansible.posix:2.1.0' is already installed, skipping. 2025-11-11 00:02:14.210989 | ubuntu-jammy | 'community.docker:4.8.2' is already installed, skipping. 2025-11-11 00:02:14.211287 | ubuntu-jammy | 'community.general:11.4.1' is already installed, skipping. 2025-11-11 00:02:14.211611 | ubuntu-jammy | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2025-11-11 00:02:14.211961 | ubuntu-jammy | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20251022.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1283o_px3mp2/tmplcqn_xzz/osism-commons-0.20251022.0-991javat 2025-11-11 00:02:14.212274 | ubuntu-jammy | Installing 'osism.commons:0.20251022.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:14.212685 | ubuntu-jammy | osism.commons:0.20251022.0 was installed successfully 2025-11-11 00:02:14.262712 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:14.263003 | ubuntu-jammy | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2025-11-11 00:02:14.263793 | ubuntu-jammy | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:14.646525 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20251022.0 2025-11-11 00:02:14.646585 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20251022.0' from Ansible Galaxy 2025-11-11 00:02:15.176380 | centos-9-stream | Validating downloaded file hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 with expected hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 2025-11-11 00:02:15.177089 | centos-9-stream | Collection 'osism.commons:0.20251022.0' obtained from server default https://galaxy.ansible.com/api/ 2025-11-11 00:02:15.375354 | centos-9-stream | Starting galaxy collection install process 2025-11-11 00:02:15.375617 | centos-9-stream | Process install dependency map 2025-11-11 00:02:15.375780 | centos-9-stream | Starting collection install process 2025-11-11 00:02:15.375976 | centos-9-stream | 'ansible.posix:2.1.0' is already installed, skipping. 2025-11-11 00:02:15.376142 | centos-9-stream | 'community.docker:4.8.2' is already installed, skipping. 2025-11-11 00:02:15.376288 | centos-9-stream | 'community.general:11.4.1' is already installed, skipping. 2025-11-11 00:02:15.376419 | centos-9-stream | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2025-11-11 00:02:15.376583 | centos-9-stream | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20251022.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1761tbnyso6k/tmpa0mn8s7r/osism-commons-0.20251022.0-um9g5v02 2025-11-11 00:02:15.376726 | centos-9-stream | Installing 'osism.commons:0.20251022.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:15.376928 | centos-9-stream | osism.commons:0.20251022.0 was installed successfully 2025-11-11 00:02:15.534676 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:15.535038 | centos-9-stream | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2025-11-11 00:02:15.535675 | centos-9-stream | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:15.903496 | ubuntu-noble | Validating downloaded file hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 with expected hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 2025-11-11 00:02:15.903568 | ubuntu-noble | Collection 'osism.commons:0.20251022.0' obtained from server default https://galaxy.ansible.com/api/ 2025-11-11 00:02:16.076823 | ubuntu-noble | Starting galaxy collection install process 2025-11-11 00:02:16.076892 | ubuntu-noble | Process install dependency map 2025-11-11 00:02:16.076992 | ubuntu-noble | Starting collection install process 2025-11-11 00:02:16.077365 | ubuntu-noble | 'ansible.posix:2.1.0' is already installed, skipping. 2025-11-11 00:02:16.077705 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2025-11-11 00:02:16.078103 | ubuntu-noble | 'community.general:11.4.1' is already installed, skipping. 2025-11-11 00:02:16.078434 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2025-11-11 00:02:16.078850 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20251022.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-16543o6ez4dj/tmpfdkfs61q/osism-commons-0.20251022.0-aki8b4rc 2025-11-11 00:02:16.079275 | ubuntu-noble | Installing 'osism.commons:0.20251022.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:16.079600 | ubuntu-noble | osism.commons:0.20251022.0 was installed successfully 2025-11-11 00:02:16.218377 | ubuntu-jammy | ok: Runtime: 0:00:08.896158 2025-11-11 00:02:16.233460 | centos-9-stream | ok: Runtime: 0:00:10.301548 2025-11-11 00:02:16.268349 | ubuntu-noble | ok: Runtime: 0:00:10.734758 2025-11-11 00:02:16.249773 | debian-bookworm | Validating downloaded file hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 with expected hash db8245b5c2111216da58d8bf041a7bc1ac5f12f87772d9fa908844603d5be7b6 2025-11-11 00:02:16.250010 | debian-bookworm | Collection 'osism.commons:0.20251022.0' obtained from server default https://galaxy.ansible.com/api/ 2025-11-11 00:02:16.453640 | debian-bookworm | Starting galaxy collection install process 2025-11-11 00:02:16.453729 | debian-bookworm | Process install dependency map 2025-11-11 00:02:16.453799 | debian-bookworm | Starting collection install process 2025-11-11 00:02:16.453985 | debian-bookworm | 'ansible.posix:2.1.0' is already installed, skipping. 2025-11-11 00:02:16.454146 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2025-11-11 00:02:16.454285 | debian-bookworm | 'community.general:11.4.1' is already installed, skipping. 2025-11-11 00:02:16.454453 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2025-11-11 00:02:16.454697 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20251022.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1836e910e6w_/tmpv62yqf6r/osism-commons-0.20251022.0-azhcllhy 2025-11-11 00:02:16.454889 | debian-bookworm | Installing 'osism.commons:0.20251022.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:16.455037 | debian-bookworm | osism.commons:0.20251022.0 was installed successfully 2025-11-11 00:02:16.141180 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:16.141595 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2025-11-11 00:02:16.143796 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:16.780612 | debian-bookworm | ok: Runtime: 0:00:11.295225 2025-11-11 00:02:16.796683 | 2025-11-11 00:02:16.796858 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2025-11-11 00:02:16.607483 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:16.607782 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2025-11-11 00:02:16.608370 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:17.388143 | centos-9-stream | skipping: Conditional result was False 2025-11-11 00:02:17.389228 | debian-bookworm | skipping: Conditional result was False 2025-11-11 00:02:17.389826 | ubuntu-jammy | skipping: Conditional result was False 2025-11-11 00:02:17.390366 | ubuntu-noble | skipping: Conditional result was False 2025-11-11 00:02:17.401316 | 2025-11-11 00:02:17.401486 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2025-11-11 00:02:18.153758 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:18.161356 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.117913 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:18.126007 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.086216 | ubuntu-jammy | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:18.095185 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.254246 | centos-9-stream | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:18.267028 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.931482 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.932485 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:18.721861 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.722500 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:18.732323 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:18.732384 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:18.732582 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2025-11-11 00:02:18.732673 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:18.674568 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:18.675218 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:18.685186 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:18.685256 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:18.685448 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: prepare 2025-11-11 00:02:18.685570 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:18.942015 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:18.942213 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:18.942539 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2025-11-11 00:02:18.942713 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:19.248573 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:19.249922 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:19.268518 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:19.268763 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:19.269788 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: prepare 2025-11-11 00:02:19.270248 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:19.980031 | ubuntu-jammy | INFO [delegated > prepare] Executing 2025-11-11 00:02:20.136759 | ubuntu-noble | INFO [delegated > prepare] Executing 2025-11-11 00:02:20.377820 | ubuntu-jammy | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2025-11-11 00:02:20.377863 | ubuntu-jammy | config file = None 2025-11-11 00:02:20.377876 | ubuntu-jammy | configured module search path = 2025-11-11 00:02:20.377882 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:20.377898 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:20.377903 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:20.377908 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:20.377913 | ubuntu-jammy | jinja version = 3.1.6 2025-11-11 00:02:20.377917 | ubuntu-jammy | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:20.378244 | ubuntu-jammy | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:20.378251 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:20.378255 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:20.378260 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:20.378264 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:20.378269 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-11-11 00:02:20.378273 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:20.378278 | ubuntu-jammy | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:20.378282 | ubuntu-jammy | 2025-11-11 00:02:20.378517 | ubuntu-jammy | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:20.378524 | ubuntu-jammy | MOLECULE_DEBUG: True 2025-11-11 00:02:20.378529 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:20.378533 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:20.378538 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:20.378542 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:20.378547 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:20.378551 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:20.378556 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:20.378561 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:20.378566 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:20.378570 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:20.378575 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:20.378579 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:20.378584 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:20.378588 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:20.378593 | ubuntu-jammy | 2025-11-11 00:02:20.378721 | ubuntu-jammy | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:20.559467 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2025-11-11 00:02:20.559510 | ubuntu-noble | config file = None 2025-11-11 00:02:20.559522 | ubuntu-noble | configured module search path = 2025-11-11 00:02:20.559527 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-11-11 00:02:20.559531 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:20.559535 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:20.559538 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-11-11 00:02:20.559542 | ubuntu-noble | jinja version = 3.1.6 2025-11-11 00:02:20.559545 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:20.559864 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:20.559872 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:20.559876 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:20.559879 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:20.559883 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:20.559886 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-11-11 00:02:20.559890 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:20.559893 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:20.559897 | ubuntu-noble | 2025-11-11 00:02:20.560126 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:20.560132 | ubuntu-noble | MOLECULE_DEBUG: True 2025-11-11 00:02:20.560136 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:20.560139 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:20.560143 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:20.560146 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:20.560150 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:20.560153 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:20.560156 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:20.560160 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:20.560163 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:20.560167 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:20.560170 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:20.560174 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:20.560177 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:20.560180 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:20.560184 | ubuntu-noble | 2025-11-11 00:02:20.560315 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:20.778322 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:20.778385 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:20.778397 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:20.778409 | ubuntu-noble | 2025-11-11 00:02:20.939375 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:20.565293 | ubuntu-jammy | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:20.565853 | ubuntu-jammy | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:20.566394 | ubuntu-jammy | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:20.566805 | ubuntu-jammy | 2025-11-11 00:02:20.691982 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:20.891793 | ubuntu-jammy | 2025-11-11 00:02:20.892202 | ubuntu-jammy | PLAY [Prepare] ***************************************************************** 2025-11-11 00:02:20.892592 | ubuntu-jammy | 2025-11-11 00:02:20.892951 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:21.037447 | debian-bookworm | INFO [delegated > prepare] Executing 2025-11-11 00:02:21.185397 | ubuntu-noble | 2025-11-11 00:02:21.185426 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2025-11-11 00:02:21.185431 | ubuntu-noble | 2025-11-11 00:02:21.186519 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:21.459864 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461555 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461601 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461606 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461611 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461615 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461619 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461623 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.10.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461627 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461632 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461636 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461663 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.41.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.41.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461667 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461671 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461675 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461682 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461691 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.461994 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462091 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462111 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462285 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462317 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462486 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462608 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462770 | centos-9-stream | WARNING Another version of 'community.dns' 3.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.462943 | centos-9-stream | WARNING Another version of 'community.docker' 4.8.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.8.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463012 | centos-9-stream | WARNING Another version of 'community.general' 11.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463178 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463294 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463453 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463609 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463741 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.463873 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464055 | centos-9-stream | WARNING Another version of 'community.mysql' 3.16.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.16.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464105 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464211 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464381 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464493 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464595 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464699 | centos-9-stream | WARNING Another version of 'community.routeros' 3.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464800 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.464967 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465070 | centos-9-stream | WARNING Another version of 'community.vmware' 5.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465198 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465350 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465460 | centos-9-stream | WARNING Another version of 'containers.podman' 1.18.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.18.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465569 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465660 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.36 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.36 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465763 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465888 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.465988 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466089 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466222 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466384 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466527 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466631 | centos-9-stream | WARNING Another version of 'google.cloud' 1.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466736 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.6 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.6 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.466858 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467007 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467105 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_object' 1.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467267 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467424 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467532 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467644 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467756 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.467931 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468051 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468179 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468309 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468413 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468507 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468597 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468685 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468780 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468891 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.468983 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469075 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469196 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469326 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469420 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469519 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469598 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469689 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.22.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.22.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.469786 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470080 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470238 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470286 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470310 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470340 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470483 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470587 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.470675 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:21.485967 | centos-9-stream | INFO [delegated > prepare] Executing 2025-11-11 00:02:21.587340 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2025-11-11 00:02:21.587394 | debian-bookworm | config file = None 2025-11-11 00:02:21.587414 | debian-bookworm | configured module search path = 2025-11-11 00:02:21.587420 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:21.587425 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:21.587430 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:21.587434 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-11-11 00:02:21.587439 | debian-bookworm | jinja version = 3.1.6 2025-11-11 00:02:21.587443 | debian-bookworm | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:21.587448 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:21.587452 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:21.587456 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:21.587460 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:21.587464 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:21.587467 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-11-11 00:02:21.587471 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:21.587475 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:21.587479 | debian-bookworm | 2025-11-11 00:02:21.587483 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:21.587487 | debian-bookworm | MOLECULE_DEBUG: True 2025-11-11 00:02:21.587491 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:21.587495 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:21.587498 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:21.587502 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:21.587507 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:21.587510 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:21.587514 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:21.587519 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:21.587523 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:21.587527 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:21.587531 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:21.587534 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:21.587538 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:21.587544 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:21.587550 | debian-bookworm | 2025-11-11 00:02:21.587579 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:21.823518 | debian-bookworm | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:21.823605 | debian-bookworm | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:21.823628 | debian-bookworm | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:21.823643 | debian-bookworm | 2025-11-11 00:02:22.039618 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:22.361666 | debian-bookworm | 2025-11-11 00:02:22.361716 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2025-11-11 00:02:22.361721 | debian-bookworm | 2025-11-11 00:02:22.361727 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:22.344431 | ubuntu-noble | ok: [molecule-auditd] 2025-11-11 00:02:22.344463 | ubuntu-noble | 2025-11-11 00:02:22.344468 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2025-11-11 00:02:22.044992 | ubuntu-jammy | ok: [molecule-auditd] 2025-11-11 00:02:22.045086 | ubuntu-jammy | 2025-11-11 00:02:22.045211 | ubuntu-jammy | TASK [Install packages in venv] ************************************************ 2025-11-11 00:02:22.035228 | centos-9-stream | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2025-11-11 00:02:22.035334 | centos-9-stream | config file = None 2025-11-11 00:02:22.035342 | centos-9-stream | configured module search path = 2025-11-11 00:02:22.035347 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-11-11 00:02:22.035353 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:22.035358 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:22.035362 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:22.035366 | centos-9-stream | jinja version = 3.1.6 2025-11-11 00:02:22.035370 | centos-9-stream | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:22.035714 | centos-9-stream | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:22.035720 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:22.035724 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:22.035728 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:22.035732 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:22.035736 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-11-11 00:02:22.035739 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:22.035743 | centos-9-stream | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:22.035747 | centos-9-stream | 2025-11-11 00:02:22.036029 | centos-9-stream | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:22.036035 | centos-9-stream | MOLECULE_DEBUG: True 2025-11-11 00:02:22.036039 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:22.036043 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:22.036047 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:22.036069 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:22.036074 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:22.036078 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:22.036081 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:22.036086 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:22.036090 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:22.036094 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:22.036098 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:22.036102 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:22.036106 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:22.036130 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:22.036137 | centos-9-stream | 2025-11-11 00:02:22.036361 | centos-9-stream | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:22.283453 | centos-9-stream | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:22.283725 | centos-9-stream | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:22.284012 | centos-9-stream | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:22.284282 | centos-9-stream | 2025-11-11 00:02:22.496201 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:22.747797 | centos-9-stream | 2025-11-11 00:02:22.748341 | centos-9-stream | PLAY [Prepare] ***************************************************************** 2025-11-11 00:02:22.748749 | centos-9-stream | 2025-11-11 00:02:22.749239 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:23.747198 | debian-bookworm | ok: [molecule-auditd] 2025-11-11 00:02:23.747280 | debian-bookworm | 2025-11-11 00:02:23.747423 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2025-11-11 00:02:24.135797 | centos-9-stream | ok: [molecule-auditd] 2025-11-11 00:02:24.135953 | centos-9-stream | 2025-11-11 00:02:24.136148 | centos-9-stream | TASK [Install packages in venv] ************************************************ 2025-11-11 00:02:26.847663 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.11)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.10.5)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.2 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.11)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.10.5)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 2.2 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.847707 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.847752 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.11)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.10.5)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.11)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.10.5)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.847758 | ubuntu-noble | 2025-11-11 00:02:26.847764 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2025-11-11 00:02:26.867093 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-11-11 00:02:26.868010 | ubuntu-noble | 2025-11-11 00:02:26.868163 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-11-11 00:02:26.868318 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:26.868441 | ubuntu-noble | 2025-11-11 00:02:26.941684 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:26.942461 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:02:26.790704 | ubuntu-jammy | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 2.8 MB/s eta 0:00:00\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 2.8 MB/s eta 0:00:00", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.790909 | ubuntu-jammy | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.3 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 10.3 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.791079 | ubuntu-jammy | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.10.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.4)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.11)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.10.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.4)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.11)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:26.791149 | ubuntu-jammy | 2025-11-11 00:02:26.791260 | ubuntu-jammy | TASK [Include required prepare tasks] ****************************************** 2025-11-11 00:02:26.811003 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-11-11 00:02:26.811148 | ubuntu-jammy | 2025-11-11 00:02:26.811327 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-11-11 00:02:26.811526 | ubuntu-jammy | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:26.811675 | ubuntu-jammy | 2025-11-11 00:02:26.911708 | ubuntu-jammy | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:26.912419 | ubuntu-jammy | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:02:29.226280 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.226480 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.5 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.5 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.226644 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.11)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.10.5)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.11)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.10.5)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.226801 | debian-bookworm | 2025-11-11 00:02:29.227128 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2025-11-11 00:02:29.250822 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-11-11 00:02:29.250952 | debian-bookworm | 2025-11-11 00:02:29.250996 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-11-11 00:02:29.251120 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:29.251219 | debian-bookworm | 2025-11-11 00:02:29.404510 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:29.405196 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:02:29.630241 | centos-9-stream | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.3\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.3", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.9 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.9 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.11)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.10.5)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.630485 | centos-9-stream | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.3\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.3", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 20.2 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 20.2 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.630654 | centos-9-stream | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.3\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.3", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.4)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.11)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.10.5)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.4)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.11)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.10.5)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-11-11 00:02:29.630757 | centos-9-stream | 2025-11-11 00:02:29.630889 | centos-9-stream | TASK [Include required prepare tasks] ****************************************** 2025-11-11 00:02:29.655598 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-11-11 00:02:29.655699 | centos-9-stream | 2025-11-11 00:02:29.655753 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-11-11 00:02:29.655897 | centos-9-stream | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:29.655991 | centos-9-stream | 2025-11-11 00:02:29.792755 | centos-9-stream | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:29.793535 | centos-9-stream | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:02:30.023074 | ubuntu-noble | ok: Runtime: 0:00:09.226243 2025-11-11 00:02:30.035145 | ubuntu-jammy | ok: Runtime: 0:00:09.222890 2025-11-11 00:02:30.042319 | debian-bookworm | ok: Runtime: 0:00:11.751631 2025-11-11 00:02:30.049496 | centos-9-stream | ok: Runtime: 0:00:12.024662 2025-11-11 00:02:30.062922 | 2025-11-11 00:02:30.063049 | TASK [ansible-molecule : Reset connection] 2025-11-11 00:02:30.109221 | 2025-11-11 00:02:30.109351 | TASK [ansible-molecule : Reset connection] 2025-11-11 00:02:30.146913 | 2025-11-11 00:02:30.147051 | TASK [ansible-molecule : Reset connection] 2025-11-11 00:02:30.186284 | 2025-11-11 00:02:30.186413 | TASK [ansible-molecule : Reset connection] 2025-11-11 00:02:30.227490 | 2025-11-11 00:02:30.227695 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2025-11-11 00:02:31.196185 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:31.204077 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.130105 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:31.138174 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.040890 | ubuntu-jammy | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:31.049332 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.213829 | centos-9-stream | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:31.224990 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.730060 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.730657 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:31.740305 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:31.740359 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:31.740563 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-11-11 00:02:31.740652 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:31.547115 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.547659 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:31.557021 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:31.557080 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:31.557272 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-11-11 00:02:31.557392 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:31.953259 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.953921 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:31.965097 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:31.965206 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:31.965359 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-11-11 00:02:31.965513 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:31.969159 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:31.969927 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:31.982532 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:31.982648 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:31.982841 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-11-11 00:02:31.982955 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:32.664816 | ubuntu-jammy | INFO [delegated > dependency] Executing 2025-11-11 00:02:32.665365 | ubuntu-jammy | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:33.114365 | ubuntu-noble | INFO [delegated > dependency] Executing 2025-11-11 00:02:33.114880 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:33.032082 | ubuntu-jammy | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:33.032495 | ubuntu-jammy | config file = None 2025-11-11 00:02:33.032906 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:33.033310 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:33.033692 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-11-11 00:02:33.034016 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:33.034490 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:33.034837 | ubuntu-jammy | jinja version = 3.1.6 2025-11-11 00:02:33.035165 | ubuntu-jammy | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:33.035515 | ubuntu-jammy | No config file found; using defaults 2025-11-11 00:02:33.035984 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:33.038660 | ubuntu-jammy | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:33.039130 | ubuntu-jammy | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:33.045497 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:33.046002 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:33.046449 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:33.046938 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:33.047226 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:33.047636 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:33.047955 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:33.048414 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:33.048800 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:33.049240 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:33.049669 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:33.050089 | ubuntu-jammy | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:33.050566 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:33.050996 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:33.051299 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:33.051614 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:33.051955 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:33.052359 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:33.052749 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:33.053374 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:33.053799 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:33.054155 | ubuntu-jammy | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:33.054669 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:33.055046 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:33.055290 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:33.055513 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:33.055985 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:33.056208 | ubuntu-jammy | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:33.056932 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:33.057289 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:33.058143 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:33.058609 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:33.061286 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:33.061569 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:33.061860 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:33.062144 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:33.062582 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:33.062903 | ubuntu-jammy | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:33.063228 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:33.063491 | ubuntu-jammy | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:33.063924 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:33.064711 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:33.065186 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:33.065560 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:33.065940 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:33.066327 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:33.066687 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:33.066995 | ubuntu-jammy | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:33.068550 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:33.069103 | ubuntu-jammy | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:33.069509 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:33.069919 | ubuntu-jammy | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:33.070224 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:33.070672 | ubuntu-jammy | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:33.071477 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:33.071826 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:33.072702 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:33.073165 | ubuntu-jammy | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:33.073528 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:33.073804 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:33.074200 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:33.074450 | ubuntu-jammy | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:33.074738 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:33.074975 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:33.079258 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:33.079569 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:33.080995 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:33.081311 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:33.081674 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:33.082158 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:33.082598 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:33.082945 | ubuntu-jammy | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:33.083193 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:33.083511 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:33.083771 | ubuntu-jammy | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:33.084144 | ubuntu-jammy | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:33.085222 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:33.085530 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:33.085980 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:33.086438 | ubuntu-jammy | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:33.086828 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:33.087165 | ubuntu-jammy | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:33.087522 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:33.087810 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:33.088201 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:33.088513 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:33.089215 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:33.089517 | ubuntu-jammy | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:33.090703 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:33.091039 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:33.091928 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:33.092235 | ubuntu-jammy | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:33.092464 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:33.092758 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:33.093034 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:33.093334 | ubuntu-jammy | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:33.093555 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:33.093918 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:33.095186 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:33.095559 | ubuntu-jammy | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:33.095812 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:33.096268 | ubuntu-jammy | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:33.096763 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:33.097093 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:33.097423 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:33.097736 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:33.098080 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:33.098288 | ubuntu-jammy | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:33.098517 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:33.098722 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:33.099067 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:33.099354 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:33.099635 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:33.099953 | ubuntu-jammy | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:33.100214 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:33.100519 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:33.100715 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:33.101052 | ubuntu-jammy | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:33.109135 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:33.109495 | ubuntu-jammy | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:33.110072 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:33.110429 | ubuntu-jammy | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:33.110637 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:33.110976 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:33.111381 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:33.111732 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:33.112075 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:33.112342 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:33.112577 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:33.112832 | ubuntu-jammy | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:33.114159 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:33.114497 | ubuntu-jammy | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:33.114705 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:33.115102 | ubuntu-jammy | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:33.115310 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:33.115711 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:33.116029 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:33.116410 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:33.117094 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:33.117399 | ubuntu-jammy | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:33.117592 | ubuntu-jammy | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:33.117952 | ubuntu-jammy | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:33.118275 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:33.118628 | ubuntu-jammy | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:33.120083 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:33.120422 | ubuntu-jammy | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:33.121750 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:33.122075 | ubuntu-jammy | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:33.122406 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:33.122730 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:33.123057 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:33.123371 | ubuntu-jammy | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:33.124508 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:33.124859 | ubuntu-jammy | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:33.125067 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:33.125370 | ubuntu-jammy | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:33.125564 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:33.125917 | ubuntu-jammy | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:33.126093 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:33.126442 | ubuntu-jammy | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:33.126683 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:33.127039 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:33.127738 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:33.128088 | ubuntu-jammy | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:33.128431 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:33.128739 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:33.128928 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:33.129262 | ubuntu-jammy | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:33.129576 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:33.129890 | ubuntu-jammy | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:33.130060 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:33.130405 | ubuntu-jammy | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:33.132394 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:33.132749 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:33.133131 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:33.133427 | ubuntu-jammy | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:33.133599 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:33.133942 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:33.134707 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:33.135028 | ubuntu-jammy | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:33.135199 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:33.135686 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:33.138365 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:33.138679 | ubuntu-jammy | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:33.142842 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:33.143199 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:33.143369 | ubuntu-jammy | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-11-11 00:02:33.144993 | ubuntu-jammy | Found installed collection osism.commons:0.20251022.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:33.146347 | ubuntu-jammy | Starting galaxy collection install process 2025-11-11 00:02:33.146479 | ubuntu-jammy | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-11-11 00:02:33.196805 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:33.197140 | ubuntu-jammy | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2025-11-11 00:02:33.213785 | ubuntu-jammy | INFO [delegated > create] Executing 2025-11-11 00:02:33.216277 | ubuntu-jammy | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2025-11-11 00:02:33.225786 | ubuntu-jammy | INFO [delegated > prepare] Executing 2025-11-11 00:02:33.225880 | ubuntu-jammy | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-11-11 00:02:33.225990 | ubuntu-jammy | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:33.233599 | ubuntu-jammy | INFO [delegated > converge] Executing 2025-11-11 00:02:33.511188 | debian-bookworm | INFO [delegated > dependency] Executing 2025-11-11 00:02:33.511357 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:33.570752 | ubuntu-noble | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:33.570786 | ubuntu-noble | config file = None 2025-11-11 00:02:33.570961 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:33.571354 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-11-11 00:02:33.571782 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-11-11 00:02:33.572138 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:33.572496 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-11-11 00:02:33.572856 | ubuntu-noble | jinja version = 3.1.6 2025-11-11 00:02:33.573214 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:33.573525 | ubuntu-noble | No config file found; using defaults 2025-11-11 00:02:33.574083 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:33.584654 | ubuntu-noble | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:33.585120 | ubuntu-noble | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:33.594891 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:33.595347 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:33.595783 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:33.596219 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:33.598317 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:33.598736 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:33.599205 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-11-11 00:02:33.599622 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:33.602953 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-11-11 00:02:33.603398 | ubuntu-noble | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:33.604024 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:33.604460 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:33.604900 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:33.605344 | ubuntu-noble | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:33.606061 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:33.606812 | ubuntu-noble | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:33.616279 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-11-11 00:02:33.616316 | ubuntu-noble | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-11-11 00:02:33.618085 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:33.618117 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:33.618127 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:33.618137 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:33.618537 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:33.619008 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:33.620561 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:33.620934 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:33.622267 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:33.622620 | ubuntu-noble | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:33.622992 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:33.623368 | ubuntu-noble | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:33.624190 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:33.624539 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:33.624895 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-11-11 00:02:33.625257 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:33.627255 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:33.627601 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:33.627958 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:33.628320 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:33.628591 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:33.628950 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:33.629258 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:33.629600 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:33.630746 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:33.631127 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:33.631487 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:33.631845 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:33.632143 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-11-11 00:02:33.632485 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:33.633628 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:33.634021 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:33.635456 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:33.635485 | ubuntu-noble | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:33.639754 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:33.639779 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:33.639788 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:33.639795 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:33.639802 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:33.639810 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:33.639817 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:33.640182 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:33.640478 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:33.640852 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:33.641176 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:33.641490 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:33.641851 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:33.642256 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:33.642559 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:33.642809 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:33.643111 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:33.643347 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:33.643923 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:33.644264 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:33.644990 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:33.645408 | ubuntu-noble | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:33.645812 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:33.646125 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:33.646388 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:33.646652 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:33.646934 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:33.647225 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:33.647487 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:33.647779 | ubuntu-noble | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:33.648039 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:33.648324 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:33.648567 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:33.648846 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:33.649569 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:33.649904 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:33.650158 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:33.650459 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:33.651538 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:33.651867 | ubuntu-noble | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:33.652118 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:33.652384 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:33.652614 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:33.652942 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:33.654473 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:33.654822 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:33.655085 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:33.655382 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:33.656772 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:33.657122 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:33.657433 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:33.657758 | ubuntu-noble | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:33.658008 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:33.658253 | ubuntu-noble | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:33.659639 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:33.660011 | ubuntu-noble | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:33.660395 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-11-11 00:02:33.660701 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:33.661118 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:33.661388 | ubuntu-noble | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:33.661633 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:33.661923 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:33.662379 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:33.662660 | ubuntu-noble | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:33.662905 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:33.663253 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:33.663571 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:33.664096 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:33.664111 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:33.664391 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:33.666123 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:33.666171 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:33.671759 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:33.671800 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:33.671811 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:33.672082 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:33.672517 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:33.672888 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:33.673344 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:33.673690 | ubuntu-noble | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:33.674190 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:33.674543 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:33.674904 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:33.675357 | ubuntu-noble | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:33.675695 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:33.676104 | ubuntu-noble | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:33.676450 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:33.676808 | ubuntu-noble | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:33.677255 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:33.677599 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:33.678059 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:33.678479 | ubuntu-noble | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:33.678915 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:33.679357 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:33.679703 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:33.680203 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:33.680553 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:33.680920 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:33.682752 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:33.682781 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:33.682791 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:33.682800 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:33.682809 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:33.683191 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:33.683530 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:33.683886 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:33.685708 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:33.686142 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:33.686491 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:33.686854 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:33.687232 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:33.687572 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:33.687930 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:33.688293 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:33.688582 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:33.688944 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:33.689244 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:33.689584 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:33.689879 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:33.690190 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:33.690477 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:33.690710 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:33.691631 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-11-11 00:02:33.692012 | ubuntu-noble | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:33.692555 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:33.692869 | ubuntu-noble | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:33.693425 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:33.693743 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:33.694449 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:33.694754 | ubuntu-noble | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:33.695106 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:33.695396 | ubuntu-noble | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:33.707162 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:33.707459 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:33.707762 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-11-11 00:02:33.709268 | ubuntu-noble | Found installed collection osism.commons:0.20251022.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:33.710668 | ubuntu-noble | Starting galaxy collection install process 2025-11-11 00:02:33.710957 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-11-11 00:02:33.772862 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:33.772930 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2025-11-11 00:02:33.787265 | ubuntu-noble | INFO [delegated > create] Executing 2025-11-11 00:02:33.789570 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2025-11-11 00:02:33.798344 | ubuntu-noble | INFO [delegated > prepare] Executing 2025-11-11 00:02:33.798476 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-11-11 00:02:33.798584 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:33.806185 | ubuntu-noble | INFO [delegated > converge] Executing 2025-11-11 00:02:33.596252 | ubuntu-jammy | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2025-11-11 00:02:33.596294 | ubuntu-jammy | config file = None 2025-11-11 00:02:33.596301 | ubuntu-jammy | configured module search path = 2025-11-11 00:02:33.596307 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:33.596313 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:33.596318 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:33.596322 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:33.596327 | ubuntu-jammy | jinja version = 3.1.6 2025-11-11 00:02:33.596332 | ubuntu-jammy | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:33.596641 | ubuntu-jammy | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:33.596648 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:33.596653 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:33.596657 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:33.596662 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:33.596666 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-11-11 00:02:33.596671 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:33.596675 | ubuntu-jammy | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:33.596680 | ubuntu-jammy | 2025-11-11 00:02:33.596973 | ubuntu-jammy | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:33.596979 | ubuntu-jammy | MOLECULE_DEBUG: True 2025-11-11 00:02:33.596984 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:33.596988 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:33.596993 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:33.596998 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:33.597002 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:33.597007 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:33.597011 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:33.597017 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:33.597021 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:33.597026 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:33.597031 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:33.597035 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:33.597040 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:33.597044 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:33.597049 | ubuntu-jammy | 2025-11-11 00:02:33.597220 | ubuntu-jammy | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:33.781492 | ubuntu-jammy | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:33.781845 | ubuntu-jammy | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:33.782189 | ubuntu-jammy | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:33.782515 | ubuntu-jammy | 2025-11-11 00:02:33.719546 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.719706 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.719971 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720130 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720304 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720504 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720662 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720818 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.10.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.720943 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721071 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721312 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721474 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.41.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.41.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721601 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721724 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.721899 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722142 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722309 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722428 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722552 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722674 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722828 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.722972 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723094 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723247 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723374 | centos-9-stream | WARNING Another version of 'community.dns' 3.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723505 | centos-9-stream | WARNING Another version of 'community.docker' 4.8.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.8.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723631 | centos-9-stream | WARNING Another version of 'community.general' 11.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723750 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.723971 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724099 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724274 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724386 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724496 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724599 | centos-9-stream | WARNING Another version of 'community.mysql' 3.16.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.16.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724707 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.724907 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725057 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725189 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725284 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725374 | centos-9-stream | WARNING Another version of 'community.routeros' 3.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725465 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725556 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725647 | centos-9-stream | WARNING Another version of 'community.vmware' 5.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725738 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725848 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.725962 | centos-9-stream | WARNING Another version of 'containers.podman' 1.18.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.18.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726093 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726243 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.36 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.36 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726366 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726463 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726556 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726695 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726823 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.726970 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727070 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727212 | centos-9-stream | WARNING Another version of 'google.cloud' 1.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727347 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.6 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.6 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727493 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727607 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727699 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_object' 1.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.727901 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728043 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728169 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728280 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728400 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728503 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728607 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728686 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728778 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.728894 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729017 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729099 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729246 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729332 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729412 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729492 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729619 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729704 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729844 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.729931 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730017 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730090 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730223 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.22.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.22.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730327 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730437 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730518 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730597 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730713 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730879 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.730975 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.731056 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.731164 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:33.745608 | centos-9-stream | INFO [delegated > dependency] Executing 2025-11-11 00:02:33.746029 | centos-9-stream | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2025-11-11 00:02:34.031494 | debian-bookworm | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:34.032226 | debian-bookworm | config file = None 2025-11-11 00:02:34.032711 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:34.033333 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:34.033765 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-11-11 00:02:34.034195 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:34.034528 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-11-11 00:02:34.034908 | debian-bookworm | jinja version = 3.1.6 2025-11-11 00:02:34.035205 | debian-bookworm | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:34.035490 | debian-bookworm | No config file found; using defaults 2025-11-11 00:02:34.036204 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:34.038242 | debian-bookworm | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:34.038542 | debian-bookworm | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:34.043114 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-11-11 00:02:34.044893 | debian-bookworm | Found installed collection osism.commons:0.20251022.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:34.046376 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:34.046946 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:34.052279 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:34.052872 | debian-bookworm | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:34.053304 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:34.053819 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:34.054184 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:34.055217 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:34.055580 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:34.056036 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:34.056377 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:34.056899 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:34.057444 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:34.057930 | debian-bookworm | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:34.058323 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:34.058721 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:34.059070 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:34.059395 | debian-bookworm | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:34.059649 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:34.060018 | debian-bookworm | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:34.064768 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:34.065154 | debian-bookworm | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:34.065760 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:34.066199 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:34.066524 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:34.066852 | debian-bookworm | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:34.067166 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:34.067430 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:34.068448 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:34.068883 | debian-bookworm | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:34.070858 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:34.071191 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:34.071854 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:34.072533 | debian-bookworm | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:34.073220 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:34.073571 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:34.074268 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:34.074834 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:34.075340 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:34.075760 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:34.077224 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:34.077696 | debian-bookworm | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:34.078247 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:34.079316 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:34.079982 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:34.080370 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:34.080933 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:34.081506 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:34.083257 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:34.083478 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:34.084241 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:34.084601 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:34.085082 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:34.085453 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:34.086148 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:34.086529 | debian-bookworm | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:34.087310 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:34.087699 | debian-bookworm | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:34.089303 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:34.089696 | debian-bookworm | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:34.091837 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:34.092227 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:34.101545 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:34.102211 | debian-bookworm | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:34.102763 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:34.103184 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:34.103833 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:34.104410 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:34.106569 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:34.107179 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:34.107693 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:34.108096 | debian-bookworm | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:34.109545 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:34.110063 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:34.110551 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:34.110913 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:34.111371 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:34.111801 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:34.112847 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:34.113231 | debian-bookworm | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:34.113607 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:34.113930 | debian-bookworm | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:34.114572 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:34.114923 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:34.116316 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:34.116801 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:34.117112 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:34.117487 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:34.119947 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:34.120232 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:34.120534 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:34.121040 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:34.121295 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:34.121628 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:34.122030 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:34.122368 | debian-bookworm | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:34.122709 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:34.123139 | debian-bookworm | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:34.123369 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:34.123750 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:34.124049 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:34.124406 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:34.124727 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:34.125208 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:34.125441 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:34.125810 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:34.126015 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:34.126384 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:34.126950 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:34.127281 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:34.127508 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:34.127988 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:34.129610 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:34.130031 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:34.130305 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:34.130703 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:34.130915 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:34.131346 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:34.131526 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:34.131949 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:34.132234 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:34.132594 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:34.132876 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:34.133283 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:34.133466 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:34.133866 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:34.134273 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:34.134620 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:34.134922 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:34.135278 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:34.135898 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:34.136245 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:34.136524 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:34.136898 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:34.137604 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:34.138030 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:34.139429 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:34.139848 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:34.140132 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:34.140518 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:34.140943 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:34.141387 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:34.141911 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:34.142312 | debian-bookworm | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:34.143107 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:34.143495 | debian-bookworm | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:34.144769 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:34.145199 | debian-bookworm | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:34.145524 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:34.145936 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:34.150958 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:34.151160 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:34.151557 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:34.151888 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:34.152055 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:34.152536 | debian-bookworm | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:34.152907 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:34.153339 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:34.153648 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:34.154057 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:34.154511 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:34.154824 | debian-bookworm | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:34.156505 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:34.156943 | debian-bookworm | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:34.157385 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:34.157788 | debian-bookworm | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:34.158357 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:34.158709 | debian-bookworm | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:34.158944 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:34.159317 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:34.159721 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:34.160132 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:34.160412 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:34.160803 | debian-bookworm | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:34.161187 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:34.161596 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:34.162461 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:34.162925 | debian-bookworm | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:34.163526 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:34.163907 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:34.164290 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:34.164553 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:34.165499 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:34.165962 | debian-bookworm | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:34.166586 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:34.167830 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:34.168412 | debian-bookworm | Starting galaxy collection install process 2025-11-11 00:02:34.168887 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-11-11 00:02:34.225332 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2025-11-11 00:02:34.225387 | ubuntu-noble | config file = None 2025-11-11 00:02:34.225398 | ubuntu-noble | configured module search path = 2025-11-11 00:02:34.225408 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-11-11 00:02:34.225417 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:34.225426 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:34.225435 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-11-11 00:02:34.225443 | ubuntu-noble | jinja version = 3.1.6 2025-11-11 00:02:34.225452 | ubuntu-noble | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:34.225914 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:34.225939 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:34.225948 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:34.225957 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:34.225966 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:34.225996 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-11-11 00:02:34.226005 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:34.226014 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:34.226024 | ubuntu-noble | 2025-11-11 00:02:34.226304 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:34.226319 | ubuntu-noble | MOLECULE_DEBUG: True 2025-11-11 00:02:34.226329 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:34.226338 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:34.226347 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:34.226355 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:34.226364 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:34.226373 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:34.226383 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:34.226394 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:34.226402 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:34.226411 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:34.226420 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:34.226428 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:34.226437 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:34.226446 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:34.226456 | ubuntu-noble | 2025-11-11 00:02:34.226753 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:33.908087 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:34.104422 | ubuntu-jammy | 2025-11-11 00:02:34.104746 | ubuntu-jammy | PLAY [Converge] **************************************************************** 2025-11-11 00:02:34.105049 | ubuntu-jammy | 2025-11-11 00:02:34.105350 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:34.271029 | centos-9-stream | ansible-galaxy [core 2.19.4] 2025-11-11 00:02:34.271557 | centos-9-stream | config file = None 2025-11-11 00:02:34.272085 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-11-11 00:02:34.272613 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-11-11 00:02:34.273175 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-11-11 00:02:34.273539 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-11-11 00:02:34.273997 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:34.274573 | centos-9-stream | jinja version = 3.1.6 2025-11-11 00:02:34.274982 | centos-9-stream | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:34.275327 | centos-9-stream | No config file found; using defaults 2025-11-11 00:02:34.275840 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-11-11 00:02:34.283608 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-11-11 00:02:34.284026 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:34.284620 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-11-11 00:02:34.285271 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:34.285528 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-11-11 00:02:34.286190 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:34.286631 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-11-11 00:02:34.286982 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:34.287570 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-11-11 00:02:34.287953 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:34.288272 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-11-11 00:02:34.288630 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:34.289222 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-11-11 00:02:34.290332 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:34.291099 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-11-11 00:02:34.291684 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:34.292428 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-11-11 00:02:34.293021 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:34.293664 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-11-11 00:02:34.294110 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:34.296096 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-11-11 00:02:34.296626 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:34.297937 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-11-11 00:02:34.298439 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:34.298909 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-11-11 00:02:34.299399 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:34.299758 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-11-11 00:02:34.300241 | centos-9-stream | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:34.300564 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-11-11 00:02:34.300889 | centos-9-stream | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:34.301303 | centos-9-stream | Loading collection ravendb.ravendb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-11-11 00:02:34.301599 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:34.301896 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-11-11 00:02:34.302296 | centos-9-stream | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:34.302662 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-11-11 00:02:34.303049 | centos-9-stream | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:34.305315 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-11-11 00:02:34.305685 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:34.306072 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-11-11 00:02:34.306436 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:34.306796 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-11-11 00:02:34.307172 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:34.310219 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-11-11 00:02:34.310747 | centos-9-stream | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:34.311212 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-11-11 00:02:34.311501 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:34.311872 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-11-11 00:02:34.312204 | centos-9-stream | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:34.312474 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-11-11 00:02:34.312882 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:34.313241 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-11-11 00:02:34.313565 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:34.313917 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-11-11 00:02:34.314289 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:34.314663 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-11-11 00:02:34.315152 | centos-9-stream | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:34.315856 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-11-11 00:02:34.316163 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:34.316407 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-11-11 00:02:34.316657 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:34.316865 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-11-11 00:02:34.317422 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:34.323856 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-11-11 00:02:34.324260 | centos-9-stream | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:34.324561 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-11-11 00:02:34.325002 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:34.326939 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-11-11 00:02:34.327425 | centos-9-stream | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:34.328947 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-11-11 00:02:34.329376 | centos-9-stream | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:34.329689 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-11-11 00:02:34.330058 | centos-9-stream | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:34.330482 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-11-11 00:02:34.330848 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:34.331138 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-11-11 00:02:34.331486 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:34.331803 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-11-11 00:02:34.332220 | centos-9-stream | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:34.332473 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-11-11 00:02:34.332756 | centos-9-stream | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:34.333325 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-11-11 00:02:34.333696 | centos-9-stream | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:34.333909 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-11-11 00:02:34.334287 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:34.334887 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-11-11 00:02:34.335243 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:34.335644 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-11-11 00:02:34.336022 | centos-9-stream | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:34.336278 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-11-11 00:02:34.336643 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:34.336873 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-11-11 00:02:34.337994 | centos-9-stream | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:34.339180 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-11-11 00:02:34.339930 | centos-9-stream | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:34.340459 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-11-11 00:02:34.341234 | centos-9-stream | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:34.341807 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-11-11 00:02:34.342297 | centos-9-stream | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:34.342672 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-11-11 00:02:34.343274 | centos-9-stream | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:34.343655 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-11-11 00:02:34.344085 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:34.344474 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-11-11 00:02:34.344843 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:34.345521 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-11-11 00:02:34.345985 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:34.346447 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-11-11 00:02:34.346974 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:34.348142 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-11-11 00:02:34.348503 | centos-9-stream | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:34.348833 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-11-11 00:02:34.349164 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:34.350441 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-11-11 00:02:34.350743 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:34.352714 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-11-11 00:02:34.353066 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:34.353620 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-11-11 00:02:34.353972 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:34.354740 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-11-11 00:02:34.355090 | centos-9-stream | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:34.355804 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-11-11 00:02:34.356165 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:34.356469 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-11-11 00:02:34.356813 | centos-9-stream | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:34.357109 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-11-11 00:02:34.357447 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:34.357737 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-11-11 00:02:34.358081 | centos-9-stream | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:34.358949 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-11-11 00:02:34.359444 | centos-9-stream | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:34.359856 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-11-11 00:02:34.274714 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:34.274938 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2025-11-11 00:02:34.283855 | debian-bookworm | INFO [delegated > create] Executing 2025-11-11 00:02:34.286104 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2025-11-11 00:02:34.295332 | debian-bookworm | INFO [delegated > prepare] Executing 2025-11-11 00:02:34.295481 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-11-11 00:02:34.295595 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:34.303687 | debian-bookworm | INFO [delegated > converge] Executing 2025-11-11 00:02:34.440992 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:34.441539 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:34.442006 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:34.442347 | ubuntu-noble | 2025-11-11 00:02:34.602095 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:34.360449 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:34.360803 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-11-11 00:02:34.361383 | centos-9-stream | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:34.361797 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-11-11 00:02:34.362301 | centos-9-stream | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:34.362540 | centos-9-stream | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2025-11-11 00:02:34.362910 | centos-9-stream | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:34.363163 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-11-11 00:02:34.364005 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:34.364517 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-11-11 00:02:34.365007 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:34.375051 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-11-11 00:02:34.375815 | centos-9-stream | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:34.378893 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-11-11 00:02:34.379302 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:34.380247 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-11-11 00:02:34.380686 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:34.381198 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-11-11 00:02:34.381532 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:34.381959 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-11-11 00:02:34.382343 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:34.382869 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-11-11 00:02:34.383256 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:34.383605 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-11-11 00:02:34.384047 | centos-9-stream | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:34.384382 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-11-11 00:02:34.384794 | centos-9-stream | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:34.385214 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-11-11 00:02:34.385611 | centos-9-stream | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:34.386260 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-11-11 00:02:34.386655 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:34.387299 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-11-11 00:02:34.387830 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:34.388231 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-11-11 00:02:34.388596 | centos-9-stream | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:34.389196 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-11-11 00:02:34.389760 | centos-9-stream | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:34.390226 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-11-11 00:02:34.390686 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:34.391149 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-11-11 00:02:34.391500 | centos-9-stream | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:34.392793 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-11-11 00:02:34.393139 | centos-9-stream | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:34.393595 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-11-11 00:02:34.394626 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:34.395297 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-11-11 00:02:34.395749 | centos-9-stream | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:34.396341 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-11-11 00:02:34.396742 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:34.397390 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-11-11 00:02:34.397817 | centos-9-stream | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:34.398245 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-11-11 00:02:34.398793 | centos-9-stream | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:34.406708 | centos-9-stream | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-11-11 00:02:34.408338 | centos-9-stream | Found installed collection osism.commons:0.20251022.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-11-11 00:02:34.409612 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-11-11 00:02:34.410236 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-11-11 00:02:34.418916 | centos-9-stream | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-11-11 00:02:34.419576 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-11-11 00:02:34.420105 | centos-9-stream | Found installed collection grafana.grafana:6.0.6 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-11-11 00:02:34.420569 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-11-11 00:02:34.420989 | centos-9-stream | Found installed collection hetzner.hcloud:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-11-11 00:02:34.421409 | centos-9-stream | Found installed collection community.crypto:3.0.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-11-11 00:02:34.421843 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-11-11 00:02:34.422408 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-11-11 00:02:34.422899 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-11-11 00:02:34.423294 | centos-9-stream | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-11-11 00:02:34.423656 | centos-9-stream | Found installed collection cisco.iosxr:12.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-11-11 00:02:34.424022 | centos-9-stream | Found installed collection community.zabbix:4.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-11-11 00:02:34.424388 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-11-11 00:02:34.424731 | centos-9-stream | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-11-11 00:02:34.425103 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-11-11 00:02:34.425602 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-11-11 00:02:34.426021 | centos-9-stream | Found installed collection theforeman.foreman:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-11-11 00:02:34.426451 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-11-11 00:02:34.426902 | centos-9-stream | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-11-11 00:02:34.427238 | centos-9-stream | Found installed collection community.hashi_vault:7.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-11-11 00:02:34.427663 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-11-11 00:02:34.428087 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-11-11 00:02:34.428435 | centos-9-stream | Found installed collection community.general:11.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-11-11 00:02:34.428730 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-11-11 00:02:34.429045 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-11-11 00:02:34.429351 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-11-11 00:02:34.429634 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-11-11 00:02:34.430141 | centos-9-stream | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-11-11 00:02:34.430424 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-11-11 00:02:34.430664 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-11-11 00:02:34.430925 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-11-11 00:02:34.431186 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-11-11 00:02:34.431429 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-11-11 00:02:34.431660 | centos-9-stream | Found installed collection kubernetes.core:6.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-11-11 00:02:34.431908 | centos-9-stream | Found installed collection netapp.ontap:23.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-11-11 00:02:34.432160 | centos-9-stream | Found installed collection cisco.dnac:6.41.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-11-11 00:02:34.432395 | centos-9-stream | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-11-11 00:02:34.432622 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-11-11 00:02:34.432873 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-11-11 00:02:34.433102 | centos-9-stream | Found installed collection vmware.vmware:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-11-11 00:02:34.433355 | centos-9-stream | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2025-11-11 00:02:34.433632 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-11-11 00:02:34.433896 | centos-9-stream | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-11-11 00:02:34.434151 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-11-11 00:02:34.434391 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-11-11 00:02:34.434616 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-11-11 00:02:34.434903 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-11-11 00:02:34.435186 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-11-11 00:02:34.435419 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-11-11 00:02:34.435630 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-11-11 00:02:34.435868 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-11-11 00:02:34.436100 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-11-11 00:02:34.436345 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-11-11 00:02:34.436578 | centos-9-stream | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-11-11 00:02:34.436816 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-11-11 00:02:34.437040 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-11-11 00:02:34.437286 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-11-11 00:02:34.437514 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-11-11 00:02:34.437727 | centos-9-stream | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-11-11 00:02:34.437962 | centos-9-stream | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-11-11 00:02:34.438199 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-11-11 00:02:34.438431 | centos-9-stream | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-11-11 00:02:34.438656 | centos-9-stream | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-11-11 00:02:34.438933 | centos-9-stream | Found installed collection amazon.aws:10.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-11-11 00:02:34.439194 | centos-9-stream | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-11-11 00:02:34.439413 | centos-9-stream | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-11-11 00:02:34.439622 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-11-11 00:02:34.439837 | centos-9-stream | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-11-11 00:02:34.440033 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-11-11 00:02:34.440249 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-11-11 00:02:34.440445 | centos-9-stream | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-11-11 00:02:34.440630 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-11-11 00:02:34.440839 | centos-9-stream | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-11-11 00:02:34.441029 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-11-11 00:02:34.441248 | centos-9-stream | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-11-11 00:02:34.441532 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-11-11 00:02:34.441814 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-11-11 00:02:34.442016 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-11-11 00:02:34.442238 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-11-11 00:02:34.442444 | centos-9-stream | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-11-11 00:02:34.442641 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-11-11 00:02:34.442895 | centos-9-stream | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-11-11 00:02:34.443073 | centos-9-stream | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-11-11 00:02:34.443269 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-11-11 00:02:34.443447 | centos-9-stream | Found installed collection cisco.ios:11.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-11-11 00:02:34.443614 | centos-9-stream | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-11-11 00:02:34.443800 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-11-11 00:02:34.444008 | centos-9-stream | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-11-11 00:02:34.444220 | centos-9-stream | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-11-11 00:02:34.444398 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-11-11 00:02:34.444580 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-11-11 00:02:34.444755 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-11-11 00:02:34.444980 | centos-9-stream | Loading collection ansible._protomatter from /home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-11-11 00:02:34.445234 | centos-9-stream | Found installed collection ansible._protomatter:2.19.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-11-11 00:02:34.445523 | centos-9-stream | Starting galaxy collection install process 2025-11-11 00:02:34.445701 | centos-9-stream | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-11-11 00:02:34.567253 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-11-11 00:02:34.567359 | centos-9-stream | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2025-11-11 00:02:34.576699 | centos-9-stream | INFO [delegated > create] Executing 2025-11-11 00:02:34.578739 | centos-9-stream | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2025-11-11 00:02:34.587301 | centos-9-stream | INFO [delegated > prepare] Executing 2025-11-11 00:02:34.587371 | centos-9-stream | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-11-11 00:02:34.587389 | centos-9-stream | INFO [delegated > prepare] Executed: Successful 2025-11-11 00:02:34.596007 | centos-9-stream | INFO [delegated > converge] Executing 2025-11-11 00:02:34.817186 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2025-11-11 00:02:34.817252 | debian-bookworm | config file = None 2025-11-11 00:02:34.817260 | debian-bookworm | configured module search path = 2025-11-11 00:02:34.817265 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-11-11 00:02:34.817270 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:34.817275 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:34.817280 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-11-11 00:02:34.817284 | debian-bookworm | jinja version = 3.1.6 2025-11-11 00:02:34.817288 | debian-bookworm | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:34.817300 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:34.817304 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:34.817308 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:34.817312 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:34.817316 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:34.817319 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-11-11 00:02:34.817323 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:34.817327 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:34.817331 | debian-bookworm | 2025-11-11 00:02:34.817397 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:34.817404 | debian-bookworm | MOLECULE_DEBUG: True 2025-11-11 00:02:34.817408 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:34.817412 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:34.817415 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:34.817419 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:34.817423 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:34.817427 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:34.817431 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:34.817436 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:34.817440 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:34.817443 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:34.817447 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:34.817451 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:34.817455 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:34.817472 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:34.817476 | debian-bookworm | 2025-11-11 00:02:34.817596 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:35.044276 | debian-bookworm | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:35.044621 | debian-bookworm | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:35.044954 | debian-bookworm | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:35.045276 | debian-bookworm | 2025-11-11 00:02:35.231607 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:34.826826 | ubuntu-noble | 2025-11-11 00:02:34.827257 | ubuntu-noble | PLAY [Converge] **************************************************************** 2025-11-11 00:02:34.827566 | ubuntu-noble | 2025-11-11 00:02:34.829032 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:35.255779 | ubuntu-jammy | ok: [molecule-auditd] 2025-11-11 00:02:35.255860 | ubuntu-jammy | 2025-11-11 00:02:35.255954 | ubuntu-jammy | TASK [Include required variables] ********************************************** 2025-11-11 00:02:35.286460 | ubuntu-jammy | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-11-11 00:02:35.286535 | ubuntu-jammy | 2025-11-11 00:02:35.286643 | ubuntu-jammy | TASK [Include role auditd] ***************************************************** 2025-11-11 00:02:35.324886 | ubuntu-jammy | included: auditd for molecule-auditd 2025-11-11 00:02:35.324979 | ubuntu-jammy | 2025-11-11 00:02:35.325004 | ubuntu-jammy | TASK [auditd : Include distribution specific install tasks] ******************** 2025-11-11 00:02:35.126577 | centos-9-stream | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2025-11-11 00:02:35.126649 | centos-9-stream | config file = None 2025-11-11 00:02:35.126656 | centos-9-stream | configured module search path = 2025-11-11 00:02:35.126662 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-11-11 00:02:35.126667 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-11-11 00:02:35.126673 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-11-11 00:02:35.126677 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-11-11 00:02:35.126681 | centos-9-stream | jinja version = 3.1.6 2025-11-11 00:02:35.126685 | centos-9-stream | pyyaml version = 6.0.3 (with libyaml v0.2.5) 2025-11-11 00:02:35.126795 | centos-9-stream | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:35.126802 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:35.126806 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:35.126810 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:35.126815 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:35.126818 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-11-11 00:02:35.126823 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:35.126826 | centos-9-stream | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:35.126830 | centos-9-stream | 2025-11-11 00:02:35.126951 | centos-9-stream | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:35.126957 | centos-9-stream | MOLECULE_DEBUG: True 2025-11-11 00:02:35.126961 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:35.126965 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:35.126969 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:35.126973 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:35.126978 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:35.126982 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:35.126986 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:35.126991 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:35.127011 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:35.127015 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:35.127019 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:35.127023 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:35.127027 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:35.127030 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:35.127034 | centos-9-stream | 2025-11-11 00:02:35.127052 | centos-9-stream | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:35.508211 | debian-bookworm | 2025-11-11 00:02:35.508549 | debian-bookworm | PLAY [Converge] **************************************************************** 2025-11-11 00:02:35.508874 | debian-bookworm | 2025-11-11 00:02:35.509274 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:35.356205 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-11-11 00:02:35.356267 | ubuntu-jammy | 2025-11-11 00:02:35.356385 | ubuntu-jammy | TASK [auditd : Install auditd package] ***************************************** 2025-11-11 00:02:35.367867 | centos-9-stream | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-11-11 00:02:35.368238 | centos-9-stream | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-11-11 00:02:35.368513 | centos-9-stream | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-11-11 00:02:35.368727 | centos-9-stream | 2025-11-11 00:02:35.563895 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-11-11 00:02:35.821969 | centos-9-stream | 2025-11-11 00:02:35.822407 | centos-9-stream | PLAY [Converge] **************************************************************** 2025-11-11 00:02:35.822741 | centos-9-stream | 2025-11-11 00:02:35.823099 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-11-11 00:02:35.985745 | ubuntu-noble | ok: [molecule-auditd] 2025-11-11 00:02:35.985840 | ubuntu-noble | 2025-11-11 00:02:35.985956 | ubuntu-noble | TASK [Include required variables] ********************************************** 2025-11-11 00:02:36.011371 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-11-11 00:02:36.011466 | ubuntu-noble | 2025-11-11 00:02:36.011584 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2025-11-11 00:02:36.054451 | ubuntu-noble | included: auditd for molecule-auditd 2025-11-11 00:02:36.055648 | ubuntu-noble | 2025-11-11 00:02:36.055672 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2025-11-11 00:02:36.085666 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-11-11 00:02:36.085738 | ubuntu-noble | 2025-11-11 00:02:36.085750 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2025-11-11 00:02:36.843553 | debian-bookworm | ok: [molecule-auditd] 2025-11-11 00:02:36.843689 | debian-bookworm | 2025-11-11 00:02:36.843891 | debian-bookworm | TASK [Include required variables] ********************************************** 2025-11-11 00:02:36.877976 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-11-11 00:02:36.878077 | debian-bookworm | 2025-11-11 00:02:36.878103 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2025-11-11 00:02:36.937061 | debian-bookworm | included: auditd for molecule-auditd 2025-11-11 00:02:36.937150 | debian-bookworm | 2025-11-11 00:02:36.937271 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2025-11-11 00:02:36.965221 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-11-11 00:02:36.965282 | debian-bookworm | 2025-11-11 00:02:36.965290 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2025-11-11 00:02:37.210423 | centos-9-stream | ok: [molecule-auditd] 2025-11-11 00:02:37.210580 | centos-9-stream | 2025-11-11 00:02:37.210799 | centos-9-stream | TASK [Include required variables] ********************************************** 2025-11-11 00:02:37.244896 | centos-9-stream | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-11-11 00:02:37.245026 | centos-9-stream | 2025-11-11 00:02:37.245045 | centos-9-stream | TASK [Include role auditd] ***************************************************** 2025-11-11 00:02:37.306226 | centos-9-stream | included: auditd for molecule-auditd 2025-11-11 00:02:37.306570 | centos-9-stream | 2025-11-11 00:02:37.307010 | centos-9-stream | TASK [auditd : Include distribution specific install tasks] ******************** 2025-11-11 00:02:37.350780 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-RedHat-family.yml for molecule-auditd 2025-11-11 00:02:37.350883 | centos-9-stream | 2025-11-11 00:02:37.350900 | centos-9-stream | TASK [auditd : Install auditd package] ***************************************** 2025-11-11 00:02:39.668459 | ubuntu-jammy | The following additional packages will be installed: 2025-11-11 00:02:39.668536 | ubuntu-jammy | libauparse0 2025-11-11 00:02:39.668639 | ubuntu-jammy | Suggested packages: 2025-11-11 00:02:39.668738 | ubuntu-jammy | audispd-plugins 2025-11-11 00:02:39.668839 | ubuntu-jammy | The following NEW packages will be installed: 2025-11-11 00:02:39.668936 | ubuntu-jammy | auditd libauparse0 2025-11-11 00:02:39.669037 | ubuntu-jammy | 0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded. 2025-11-11 00:02:39.669886 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1762819194, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded.\nNeed to get 270 kB of archives.\nAfter this operation, 876 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]\nGet:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]\nFetched 270 kB in 1s (389 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 32512 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking auditd (1:3.0.7-1build1) ...\r\nSetting up libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSetting up auditd (1:3.0.7-1build1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\nProcessing triggers for libc-bin (2.35-0ubuntu3.11) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded.", "Need to get 270 kB of archives.", "After this operation, 876 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]", "Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]", "Fetched 270 kB in 1s (389 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 32512 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.7-1build1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking auditd (1:3.0.7-1build1) ...", "Setting up libauparse0:amd64 (1:3.0.7-1build1) ...", "Setting up auditd (1:3.0.7-1build1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "Processing triggers for libc-bin (2.35-0ubuntu3.11) ..."]} 2025-11-11 00:02:39.669957 | ubuntu-jammy | 2025-11-11 00:02:39.670061 | ubuntu-jammy | TASK [auditd : Install audispd-plugins package] ******************************** 2025-11-11 00:02:40.188058 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} 2025-11-11 00:02:40.188184 | centos-9-stream | 2025-11-11 00:02:40.188279 | centos-9-stream | TASK [auditd : Install audispd-plugins package] ******************************** 2025-11-11 00:02:40.644768 | ubuntu-noble | The following additional packages will be installed: 2025-11-11 00:02:40.644812 | ubuntu-noble | libauparse0t64 2025-11-11 00:02:40.644822 | ubuntu-noble | Suggested packages: 2025-11-11 00:02:40.644829 | ubuntu-noble | audispd-plugins 2025-11-11 00:02:40.644838 | ubuntu-noble | The following NEW packages will be installed: 2025-11-11 00:02:40.644846 | ubuntu-noble | auditd libauparse0t64 2025-11-11 00:02:40.644853 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded. 2025-11-11 00:02:40.647774 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1762819194, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 1s (426 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 35031 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.6) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 1 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 1s (426 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 35031 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.6) ..."]} 2025-11-11 00:02:40.648062 | ubuntu-noble | 2025-11-11 00:02:40.648301 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2025-11-11 00:02:42.054417 | debian-bookworm | The following additional packages will be installed: 2025-11-11 00:02:42.054530 | debian-bookworm | libauparse0 2025-11-11 00:02:42.054730 | debian-bookworm | Suggested packages: 2025-11-11 00:02:42.054880 | debian-bookworm | audispd-plugins 2025-11-11 00:02:42.055035 | debian-bookworm | The following NEW packages will be installed: 2025-11-11 00:02:42.055188 | debian-bookworm | auditd libauparse0 2025-11-11 00:02:42.055343 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-11-11 00:02:42.056597 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1762819192, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (2622 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28690 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u13) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (2622 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28690 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u13) ..."]} 2025-11-11 00:02:42.056666 | debian-bookworm | 2025-11-11 00:02:42.056825 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2025-11-11 00:02:42.616000 | ubuntu-jammy | The following NEW packages will be installed: 2025-11-11 00:02:42.616127 | ubuntu-jammy | audispd-plugins 2025-11-11 00:02:42.616281 | ubuntu-jammy | 0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded. 2025-11-11 00:02:42.616597 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1762819194, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.\nNeed to get 39.1 kB of archives.\nAfter this operation, 137 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]\nFetched 39.1 kB in 0s (116 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 32601 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.7-1build1) ...\r\nSetting up audispd-plugins (1:3.0.7-1build1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.", "Need to get 39.1 kB of archives.", "After this operation, 137 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]", "Fetched 39.1 kB in 0s (116 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 32601 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.7-1build1) ...", "Setting up audispd-plugins (1:3.0.7-1build1) ..."]} 2025-11-11 00:02:42.616728 | ubuntu-jammy | 2025-11-11 00:02:42.616879 | ubuntu-jammy | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-11-11 00:02:43.644732 | ubuntu-noble | The following NEW packages will be installed: 2025-11-11 00:02:43.644921 | ubuntu-noble | audispd-plugins 2025-11-11 00:02:43.645075 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded. 2025-11-11 00:02:43.645313 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1762819194, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (334 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 35127 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (334 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 35127 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2025-11-11 00:02:43.645573 | ubuntu-noble | 2025-11-11 00:02:43.645589 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-11-11 00:02:44.105825 | ubuntu-jammy | --- before 2025-11-11 00:02:44.105966 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1477s1jyt2tr/tmpkmzrdy9h/auditd.conf.j2 2025-11-11 00:02:44.106076 | ubuntu-jammy | @@ -0,0 +1,37 @@ 2025-11-11 00:02:44.106178 | ubuntu-jammy | +# 2025-11-11 00:02:44.106279 | ubuntu-jammy | +# This file controls the configuration of the audit daemon 2025-11-11 00:02:44.106434 | ubuntu-jammy | +# 2025-11-11 00:02:44.106534 | ubuntu-jammy | + 2025-11-11 00:02:44.106648 | ubuntu-jammy | +local_events = yes 2025-11-11 00:02:44.106745 | ubuntu-jammy | +write_logs = yes 2025-11-11 00:02:44.106847 | ubuntu-jammy | +log_file = /var/log/audit/audit.log 2025-11-11 00:02:44.106947 | ubuntu-jammy | +log_group = adm 2025-11-11 00:02:44.107047 | ubuntu-jammy | +log_format = RAW 2025-11-11 00:02:44.107151 | ubuntu-jammy | +flush = INCREMENTAL_ASYNC 2025-11-11 00:02:44.107248 | ubuntu-jammy | +freq = 50 2025-11-11 00:02:44.107351 | ubuntu-jammy | +max_log_file = 8 2025-11-11 00:02:44.107452 | ubuntu-jammy | +num_logs = 5 2025-11-11 00:02:44.107555 | ubuntu-jammy | +priority_boost = 4 2025-11-11 00:02:44.107661 | ubuntu-jammy | +disp_qos = lossy 2025-11-11 00:02:44.107763 | ubuntu-jammy | +dispatcher = /sbin/audispd 2025-11-11 00:02:44.107861 | ubuntu-jammy | +name_format = NONE 2025-11-11 00:02:44.107961 | ubuntu-jammy | +##name = mydomain 2025-11-11 00:02:44.108061 | ubuntu-jammy | +max_log_file_action = ROTATE 2025-11-11 00:02:44.108162 | ubuntu-jammy | +space_left = 12361 2025-11-11 00:02:44.108260 | ubuntu-jammy | +space_left_action = email 2025-11-11 00:02:44.108358 | ubuntu-jammy | +verify_email = yes 2025-11-11 00:02:44.108456 | ubuntu-jammy | +action_mail_acct = root 2025-11-11 00:02:44.108568 | ubuntu-jammy | +admin_space_left = 50 2025-11-11 00:02:44.108677 | ubuntu-jammy | +admin_space_left_action = SUSPEND 2025-11-11 00:02:44.108779 | ubuntu-jammy | +disk_full_action = SUSPEND 2025-11-11 00:02:44.108876 | ubuntu-jammy | +disk_error_action = SUSPEND 2025-11-11 00:02:44.109135 | ubuntu-jammy | +use_libwrap = yes 2025-11-11 00:02:44.109258 | ubuntu-jammy | +##tcp_listen_port = 60 2025-11-11 00:02:44.109365 | ubuntu-jammy | +tcp_listen_queue = 5 2025-11-11 00:02:44.109479 | ubuntu-jammy | +tcp_max_per_addr = 1 2025-11-11 00:02:44.109648 | ubuntu-jammy | +##tcp_client_ports = 1024-65535 2025-11-11 00:02:44.109727 | ubuntu-jammy | +tcp_client_max_idle = 0 2025-11-11 00:02:44.109828 | ubuntu-jammy | +enable_krb5 = no 2025-11-11 00:02:44.109928 | ubuntu-jammy | +krb5_principal = auditd 2025-11-11 00:02:44.110031 | ubuntu-jammy | +##krb5_key_file = /etc/audit/audit.key 2025-11-11 00:02:44.110133 | ubuntu-jammy | +distribute_network = no 2025-11-11 00:02:44.110227 | ubuntu-jammy | 2025-11-11 00:02:44.114357 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819362.6335464-1826-179023336115115/.source.conf", "state": "file", "uid": 0} 2025-11-11 00:02:44.114418 | ubuntu-jammy | 2025-11-11 00:02:44.114425 | ubuntu-jammy | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-11-11 00:02:44.574223 | ubuntu-jammy | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-11-11 00:02:44.574261 | ubuntu-jammy | 2025-11-11 00:02:44.574268 | ubuntu-jammy | TASK [auditd : Deploy rules for auditd] **************************************** 2025-11-11 00:02:45.151698 | ubuntu-noble | --- before 2025-11-11 00:02:45.152338 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1921ulwuj054/tmpwft8etks/auditd.conf.j2 2025-11-11 00:02:45.152812 | ubuntu-noble | @@ -0,0 +1,37 @@ 2025-11-11 00:02:45.153234 | ubuntu-noble | +# 2025-11-11 00:02:45.153610 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2025-11-11 00:02:45.154019 | ubuntu-noble | +# 2025-11-11 00:02:45.154375 | ubuntu-noble | + 2025-11-11 00:02:45.154781 | ubuntu-noble | +local_events = yes 2025-11-11 00:02:45.155164 | ubuntu-noble | +write_logs = yes 2025-11-11 00:02:45.155513 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2025-11-11 00:02:45.155904 | ubuntu-noble | +log_group = adm 2025-11-11 00:02:45.156298 | ubuntu-noble | +log_format = RAW 2025-11-11 00:02:45.156649 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2025-11-11 00:02:45.157039 | ubuntu-noble | +freq = 50 2025-11-11 00:02:45.157390 | ubuntu-noble | +max_log_file = 8 2025-11-11 00:02:45.157766 | ubuntu-noble | +num_logs = 5 2025-11-11 00:02:45.158145 | ubuntu-noble | +priority_boost = 4 2025-11-11 00:02:45.158487 | ubuntu-noble | +disp_qos = lossy 2025-11-11 00:02:45.158864 | ubuntu-noble | +dispatcher = /sbin/audispd 2025-11-11 00:02:45.159238 | ubuntu-noble | +name_format = NONE 2025-11-11 00:02:45.159577 | ubuntu-noble | +##name = mydomain 2025-11-11 00:02:45.159995 | ubuntu-noble | +max_log_file_action = ROTATE 2025-11-11 00:02:45.160349 | ubuntu-noble | +space_left = 12361 2025-11-11 00:02:45.160690 | ubuntu-noble | +space_left_action = email 2025-11-11 00:02:45.161084 | ubuntu-noble | +verify_email = yes 2025-11-11 00:02:45.161437 | ubuntu-noble | +action_mail_acct = root 2025-11-11 00:02:45.161816 | ubuntu-noble | +admin_space_left = 50 2025-11-11 00:02:45.162199 | ubuntu-noble | +admin_space_left_action = SUSPEND 2025-11-11 00:02:45.163750 | ubuntu-noble | +disk_full_action = SUSPEND 2025-11-11 00:02:45.163777 | ubuntu-noble | +disk_error_action = SUSPEND 2025-11-11 00:02:45.163789 | ubuntu-noble | +use_libwrap = yes 2025-11-11 00:02:45.163798 | ubuntu-noble | +##tcp_listen_port = 60 2025-11-11 00:02:45.163870 | ubuntu-noble | +tcp_listen_queue = 5 2025-11-11 00:02:45.164234 | ubuntu-noble | +tcp_max_per_addr = 1 2025-11-11 00:02:45.164589 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2025-11-11 00:02:45.164968 | ubuntu-noble | +tcp_client_max_idle = 0 2025-11-11 00:02:45.165341 | ubuntu-noble | +enable_krb5 = no 2025-11-11 00:02:45.165685 | ubuntu-noble | +krb5_principal = auditd 2025-11-11 00:02:45.166078 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2025-11-11 00:02:45.166430 | ubuntu-noble | +distribute_network = no 2025-11-11 00:02:45.166784 | ubuntu-noble | 2025-11-11 00:02:45.167280 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819363.6645198-2318-194723893493512/.source.conf", "state": "file", "uid": 0} 2025-11-11 00:02:45.167623 | ubuntu-noble | 2025-11-11 00:02:45.168038 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-11-11 00:02:45.205470 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "msg": "", "rc": 0, "results": ["Installed: audispd-plugins-3.1.5-7.el9.x86_64"]} 2025-11-11 00:02:45.205600 | centos-9-stream | 2025-11-11 00:02:45.205797 | centos-9-stream | TASK [auditd : Allow manual restart of auditd service] ************************* 2025-11-11 00:02:45.442919 | debian-bookworm | The following NEW packages will be installed: 2025-11-11 00:02:45.443222 | debian-bookworm | audispd-plugins 2025-11-11 00:02:45.443516 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-11-11 00:02:45.444131 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1762819192, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (578 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28781 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (578 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28781 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2025-11-11 00:02:45.444388 | debian-bookworm | 2025-11-11 00:02:45.444702 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-11-11 00:02:45.692101 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-11-11 00:02:45.693732 | ubuntu-noble | 2025-11-11 00:02:45.693906 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2025-11-11 00:02:45.518345 | ubuntu-jammy | --- before 2025-11-11 00:02:45.518383 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1477s1jyt2tr/tmphzk_cnc8/20-neo23x0.rules.j2 2025-11-11 00:02:45.518390 | ubuntu-jammy | @@ -0,0 +1,750 @@ 2025-11-11 00:02:45.518395 | ubuntu-jammy | +# ___ ___ __ __ 2025-11-11 00:02:45.518401 | ubuntu-jammy | +# / | __ ______/ (_) /_____/ / 2025-11-11 00:02:45.518405 | ubuntu-jammy | +# / /| |/ / / / __ / / __/ __ / 2025-11-11 00:02:45.518410 | ubuntu-jammy | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-11-11 00:02:45.518414 | ubuntu-jammy | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-11-11 00:02:45.518419 | ubuntu-jammy | +# 2025-11-11 00:02:45.518424 | ubuntu-jammy | +# Linux Audit Daemon - Best Practice Configuration 2025-11-11 00:02:45.518429 | ubuntu-jammy | +# /etc/audit/audit.rules 2025-11-11 00:02:45.518434 | ubuntu-jammy | +# 2025-11-11 00:02:45.518438 | ubuntu-jammy | +# Compiled by Florian Roth 2025-11-11 00:02:45.518443 | ubuntu-jammy | +# 2025-11-11 00:02:45.518447 | ubuntu-jammy | +# Created : 2017/12/05 2025-11-11 00:02:45.518452 | ubuntu-jammy | +# Modified : 2023/01/25 2025-11-11 00:02:45.518456 | ubuntu-jammy | +# 2025-11-11 00:02:45.518461 | ubuntu-jammy | +# Based on rules published here: 2025-11-11 00:02:45.518465 | ubuntu-jammy | +# Gov.uk auditd rules 2025-11-11 00:02:45.518470 | ubuntu-jammy | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-11-11 00:02:45.518475 | ubuntu-jammy | +# CentOS 7 hardening 2025-11-11 00:02:45.518479 | ubuntu-jammy | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-11-11 00:02:45.518484 | ubuntu-jammy | +# Linux audit repo 2025-11-11 00:02:45.518488 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-11-11 00:02:45.518493 | ubuntu-jammy | +# Auditd high performance linux auditing 2025-11-11 00:02:45.518506 | ubuntu-jammy | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-11-11 00:02:45.518511 | ubuntu-jammy | +# 2025-11-11 00:02:45.518516 | ubuntu-jammy | +# Further rules 2025-11-11 00:02:45.518520 | ubuntu-jammy | +# For PCI DSS compliance see: 2025-11-11 00:02:45.518525 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-11-11 00:02:45.518530 | ubuntu-jammy | +# For NISPOM compliance see: 2025-11-11 00:02:45.518534 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-11-11 00:02:45.518539 | ubuntu-jammy | + 2025-11-11 00:02:45.518544 | ubuntu-jammy | +# Remove any existing rules 2025-11-11 00:02:45.518548 | ubuntu-jammy | +-D 2025-11-11 00:02:45.518553 | ubuntu-jammy | + 2025-11-11 00:02:45.518557 | ubuntu-jammy | +# Buffer Size 2025-11-11 00:02:45.518562 | ubuntu-jammy | +## Feel free to increase this if the machine panic's 2025-11-11 00:02:45.518566 | ubuntu-jammy | +-b 8192 2025-11-11 00:02:45.518571 | ubuntu-jammy | + 2025-11-11 00:02:45.518575 | ubuntu-jammy | +# Failure Mode 2025-11-11 00:02:45.518580 | ubuntu-jammy | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-11-11 00:02:45.518584 | ubuntu-jammy | +-f 1 2025-11-11 00:02:45.518589 | ubuntu-jammy | + 2025-11-11 00:02:45.518630 | ubuntu-jammy | +# Ignore errors 2025-11-11 00:02:45.518821 | ubuntu-jammy | +## e.g. caused by users or files not found in the local environment 2025-11-11 00:02:45.518948 | ubuntu-jammy | +-i 2025-11-11 00:02:45.519063 | ubuntu-jammy | + 2025-11-11 00:02:45.519180 | ubuntu-jammy | +# Self Auditing --------------------------------------------------------------- 2025-11-11 00:02:45.519295 | ubuntu-jammy | + 2025-11-11 00:02:45.519413 | ubuntu-jammy | +## Audit the audit logs 2025-11-11 00:02:45.519537 | ubuntu-jammy | +### Successful and unsuccessful attempts to read information from the audit records 2025-11-11 00:02:45.519669 | ubuntu-jammy | +-w /var/log/audit/ -p wra -k auditlog 2025-11-11 00:02:45.519792 | ubuntu-jammy | +-w /var/audit/ -p wra -k auditlog 2025-11-11 00:02:45.519907 | ubuntu-jammy | + 2025-11-11 00:02:45.520022 | ubuntu-jammy | +## Auditd configuration 2025-11-11 00:02:45.520146 | ubuntu-jammy | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-11-11 00:02:45.520264 | ubuntu-jammy | +-w /etc/audit/ -p wa -k auditconfig 2025-11-11 00:02:45.520381 | ubuntu-jammy | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-11-11 00:02:45.520497 | ubuntu-jammy | +-w /etc/audisp/ -p wa -k audispconfig 2025-11-11 00:02:45.520609 | ubuntu-jammy | + 2025-11-11 00:02:45.520752 | ubuntu-jammy | +## Monitor for use of audit management tools 2025-11-11 00:02:45.520872 | ubuntu-jammy | +-w /sbin/auditctl -p x -k audittools 2025-11-11 00:02:45.520986 | ubuntu-jammy | +-w /sbin/auditd -p x -k audittools 2025-11-11 00:02:45.521102 | ubuntu-jammy | +-w /usr/sbin/auditd -p x -k audittools 2025-11-11 00:02:45.521217 | ubuntu-jammy | +-w /usr/sbin/augenrules -p x -k audittools 2025-11-11 00:02:45.521331 | ubuntu-jammy | + 2025-11-11 00:02:45.521449 | ubuntu-jammy | +## Access to all audit trails 2025-11-11 00:02:45.521561 | ubuntu-jammy | + 2025-11-11 00:02:45.521713 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-11-11 00:02:45.521837 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-11-11 00:02:45.521954 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-11-11 00:02:45.522069 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-11-11 00:02:45.522186 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-11-11 00:02:45.522337 | ubuntu-jammy | + 2025-11-11 00:02:45.522461 | ubuntu-jammy | +# Filters --------------------------------------------------------------------- 2025-11-11 00:02:45.522576 | ubuntu-jammy | + 2025-11-11 00:02:45.522707 | ubuntu-jammy | +### We put these early because audit is a first match wins system. 2025-11-11 00:02:45.522823 | ubuntu-jammy | + 2025-11-11 00:02:45.522940 | ubuntu-jammy | +## Ignore SELinux AVC records 2025-11-11 00:02:45.523057 | ubuntu-jammy | +-a always,exclude -F msgtype=AVC 2025-11-11 00:02:45.523171 | ubuntu-jammy | + 2025-11-11 00:02:45.523286 | ubuntu-jammy | +## Ignore current working directory records 2025-11-11 00:02:45.523403 | ubuntu-jammy | +-a always,exclude -F msgtype=CWD 2025-11-11 00:02:45.523515 | ubuntu-jammy | + 2025-11-11 00:02:45.523639 | ubuntu-jammy | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-11-11 00:02:45.523784 | ubuntu-jammy | +-a never,user -F subj_type=crond_t 2025-11-11 00:02:45.523905 | ubuntu-jammy | +-a never,exit -F subj_type=crond_t 2025-11-11 00:02:45.524030 | ubuntu-jammy | + 2025-11-11 00:02:45.524148 | ubuntu-jammy | +## This prevents chrony from overwhelming the logs 2025-11-11 00:02:45.524272 | ubuntu-jammy | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-11-11 00:02:45.524387 | ubuntu-jammy | + 2025-11-11 00:02:45.524510 | ubuntu-jammy | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-11-11 00:02:45.524629 | ubuntu-jammy | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-11-11 00:02:45.524767 | ubuntu-jammy | + 2025-11-11 00:02:45.524886 | ubuntu-jammy | +## Open VM Tools 2025-11-11 00:02:45.525007 | ubuntu-jammy | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-11-11 00:02:45.525121 | ubuntu-jammy | + 2025-11-11 00:02:45.525241 | ubuntu-jammy | +## High Volume Event Filter (especially on Linux Workstations) 2025-11-11 00:02:45.525358 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-11-11 00:02:45.525477 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-11-11 00:02:45.525592 | ubuntu-jammy | + 2025-11-11 00:02:45.525788 | ubuntu-jammy | +## FileBeat 2025-11-11 00:02:45.525911 | ubuntu-jammy | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-11-11 00:02:45.526023 | ubuntu-jammy | + 2025-11-11 00:02:45.526140 | ubuntu-jammy | +## More information on how to filter events 2025-11-11 00:02:45.526259 | ubuntu-jammy | +### https://access.redhat.com/solutions/2482221 2025-11-11 00:02:45.526404 | ubuntu-jammy | + 2025-11-11 00:02:45.526524 | ubuntu-jammy | +# Rules ----------------------------------------------------------------------- 2025-11-11 00:02:45.526638 | ubuntu-jammy | + 2025-11-11 00:02:45.526785 | ubuntu-jammy | +## Kernel parameters 2025-11-11 00:02:45.526905 | ubuntu-jammy | +-w /etc/sysctl.conf -p wa -k sysctl 2025-11-11 00:02:45.527023 | ubuntu-jammy | +-w /etc/sysctl.d -p wa -k sysctl 2025-11-11 00:02:45.527142 | ubuntu-jammy | + 2025-11-11 00:02:45.527258 | ubuntu-jammy | +## Kernel module loading and unloading 2025-11-11 00:02:45.527375 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-11-11 00:02:45.527491 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-11-11 00:02:45.527607 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-11-11 00:02:45.527744 | ubuntu-jammy | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-11-11 00:02:45.527862 | ubuntu-jammy | + 2025-11-11 00:02:45.527979 | ubuntu-jammy | +## Modprobe configuration 2025-11-11 00:02:45.528095 | ubuntu-jammy | +-w /etc/modprobe.conf -p wa -k modprobe 2025-11-11 00:02:45.528211 | ubuntu-jammy | +-w /etc/modprobe.d -p wa -k modprobe 2025-11-11 00:02:45.528322 | ubuntu-jammy | + 2025-11-11 00:02:45.528438 | ubuntu-jammy | +## KExec usage (all actions) 2025-11-11 00:02:45.528555 | ubuntu-jammy | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-11-11 00:02:45.528700 | ubuntu-jammy | + 2025-11-11 00:02:45.528823 | ubuntu-jammy | +## Special files 2025-11-11 00:02:45.528944 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-11-11 00:02:45.529058 | ubuntu-jammy | + 2025-11-11 00:02:45.529175 | ubuntu-jammy | +## Mount operations (only attributable) 2025-11-11 00:02:45.529299 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-11-11 00:02:45.529414 | ubuntu-jammy | + 2025-11-11 00:02:45.529531 | ubuntu-jammy | +### NFS mount 2025-11-11 00:02:45.529670 | ubuntu-jammy | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.529801 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.529915 | ubuntu-jammy | + 2025-11-11 00:02:45.530033 | ubuntu-jammy | +## Change swap (only attributable) 2025-11-11 00:02:45.530153 | ubuntu-jammy | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-11-11 00:02:45.530266 | ubuntu-jammy | + 2025-11-11 00:02:45.530404 | ubuntu-jammy | +## Time 2025-11-11 00:02:45.530531 | ubuntu-jammy | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-11-11 00:02:45.530647 | ubuntu-jammy | +### Local time zone 2025-11-11 00:02:45.530778 | ubuntu-jammy | +-w /etc/localtime -p wa -k localtime 2025-11-11 00:02:45.530891 | ubuntu-jammy | + 2025-11-11 00:02:45.531006 | ubuntu-jammy | +## Stunnel 2025-11-11 00:02:45.531122 | ubuntu-jammy | +-w /usr/sbin/stunnel -p x -k stunnel 2025-11-11 00:02:45.531236 | ubuntu-jammy | +-w /usr/bin/stunnel -p x -k stunnel 2025-11-11 00:02:45.531346 | ubuntu-jammy | + 2025-11-11 00:02:45.531463 | ubuntu-jammy | +## Cron configuration & scheduled jobs 2025-11-11 00:02:45.531578 | ubuntu-jammy | +-w /etc/cron.allow -p wa -k cron 2025-11-11 00:02:45.531718 | ubuntu-jammy | +-w /etc/cron.deny -p wa -k cron 2025-11-11 00:02:45.531837 | ubuntu-jammy | +-w /etc/cron.d/ -p wa -k cron 2025-11-11 00:02:45.531956 | ubuntu-jammy | +-w /etc/cron.daily/ -p wa -k cron 2025-11-11 00:02:45.532072 | ubuntu-jammy | +-w /etc/cron.hourly/ -p wa -k cron 2025-11-11 00:02:45.532188 | ubuntu-jammy | +-w /etc/cron.monthly/ -p wa -k cron 2025-11-11 00:02:45.532304 | ubuntu-jammy | +-w /etc/cron.weekly/ -p wa -k cron 2025-11-11 00:02:45.532420 | ubuntu-jammy | +-w /etc/crontab -p wa -k cron 2025-11-11 00:02:45.532536 | ubuntu-jammy | +-w /var/spool/cron/ -p wa -k cron 2025-11-11 00:02:45.532647 | ubuntu-jammy | + 2025-11-11 00:02:45.532796 | ubuntu-jammy | +## User, group, password databases 2025-11-11 00:02:45.532914 | ubuntu-jammy | +-w /etc/group -p wa -k etcgroup 2025-11-11 00:02:45.533030 | ubuntu-jammy | +-w /etc/passwd -p wa -k etcpasswd 2025-11-11 00:02:45.533145 | ubuntu-jammy | +-w /etc/gshadow -k etcgroup 2025-11-11 00:02:45.533262 | ubuntu-jammy | +-w /etc/shadow -k etcpasswd 2025-11-11 00:02:45.533378 | ubuntu-jammy | +-w /etc/security/opasswd -k opasswd 2025-11-11 00:02:45.533489 | ubuntu-jammy | + 2025-11-11 00:02:45.533605 | ubuntu-jammy | +## Sudoers file changes 2025-11-11 00:02:45.533736 | ubuntu-jammy | +-w /etc/sudoers -p wa -k actions 2025-11-11 00:02:45.533852 | ubuntu-jammy | +-w /etc/sudoers.d/ -p wa -k actions 2025-11-11 00:02:45.533966 | ubuntu-jammy | + 2025-11-11 00:02:45.534079 | ubuntu-jammy | +## Passwd 2025-11-11 00:02:45.534195 | ubuntu-jammy | +-w /usr/bin/passwd -p x -k passwd_modification 2025-11-11 00:02:45.534328 | ubuntu-jammy | + 2025-11-11 00:02:45.534453 | ubuntu-jammy | +## Tools to change group identifiers 2025-11-11 00:02:45.534572 | ubuntu-jammy | +-w /usr/sbin/groupadd -p x -k group_modification 2025-11-11 00:02:45.534718 | ubuntu-jammy | +-w /usr/sbin/groupmod -p x -k group_modification 2025-11-11 00:02:45.534840 | ubuntu-jammy | +-w /usr/sbin/addgroup -p x -k group_modification 2025-11-11 00:02:45.534957 | ubuntu-jammy | +-w /usr/sbin/useradd -p x -k user_modification 2025-11-11 00:02:45.535074 | ubuntu-jammy | +-w /usr/sbin/userdel -p x -k user_modification 2025-11-11 00:02:45.535190 | ubuntu-jammy | +-w /usr/sbin/usermod -p x -k user_modification 2025-11-11 00:02:45.535304 | ubuntu-jammy | +-w /usr/sbin/adduser -p x -k user_modification 2025-11-11 00:02:45.535416 | ubuntu-jammy | + 2025-11-11 00:02:45.535531 | ubuntu-jammy | +## Login configuration and information 2025-11-11 00:02:45.535648 | ubuntu-jammy | +-w /etc/login.defs -p wa -k login 2025-11-11 00:02:45.535776 | ubuntu-jammy | +-w /etc/securetty -p wa -k login 2025-11-11 00:02:45.535892 | ubuntu-jammy | +-w /var/log/faillog -p wa -k login 2025-11-11 00:02:45.536008 | ubuntu-jammy | +-w /var/log/lastlog -p wa -k login 2025-11-11 00:02:45.536126 | ubuntu-jammy | +-w /var/log/tallylog -p wa -k login 2025-11-11 00:02:45.536240 | ubuntu-jammy | + 2025-11-11 00:02:45.536355 | ubuntu-jammy | +## Network Environment 2025-11-11 00:02:45.536470 | ubuntu-jammy | +### Changes to hostname 2025-11-11 00:02:45.536594 | ubuntu-jammy | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-11-11 00:02:45.536716 | ubuntu-jammy | + 2025-11-11 00:02:45.536831 | ubuntu-jammy | +### Detect Remote Shell Use 2025-11-11 00:02:45.536953 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:45.537076 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:45.537186 | ubuntu-jammy | + 2025-11-11 00:02:45.537305 | ubuntu-jammy | +### Successful IPv4 Connections 2025-11-11 00:02:45.537425 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-11-11 00:02:45.537536 | ubuntu-jammy | + 2025-11-11 00:02:45.537651 | ubuntu-jammy | +### Successful IPv6 Connections 2025-11-11 00:02:45.537796 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-11-11 00:02:45.537909 | ubuntu-jammy | + 2025-11-11 00:02:45.538023 | ubuntu-jammy | +### Changes to other files 2025-11-11 00:02:45.538141 | ubuntu-jammy | +-w /etc/hosts -p wa -k network_modifications 2025-11-11 00:02:45.538257 | ubuntu-jammy | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-11-11 00:02:45.538391 | ubuntu-jammy | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-11-11 00:02:45.538509 | ubuntu-jammy | +-w /etc/network/ -p wa -k network 2025-11-11 00:02:45.538705 | ubuntu-jammy | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-11-11 00:02:45.538840 | ubuntu-jammy | + 2025-11-11 00:02:45.538955 | ubuntu-jammy | +### Changes to issue 2025-11-11 00:02:45.539070 | ubuntu-jammy | +-w /etc/issue -p wa -k etcissue 2025-11-11 00:02:45.539185 | ubuntu-jammy | +-w /etc/issue.net -p wa -k etcissue 2025-11-11 00:02:45.539306 | ubuntu-jammy | + 2025-11-11 00:02:45.539423 | ubuntu-jammy | +## System startup scripts 2025-11-11 00:02:45.539537 | ubuntu-jammy | +-w /etc/inittab -p wa -k init 2025-11-11 00:02:45.539651 | ubuntu-jammy | +-w /etc/init.d/ -p wa -k init 2025-11-11 00:02:45.539796 | ubuntu-jammy | +-w /etc/init/ -p wa -k init 2025-11-11 00:02:45.539910 | ubuntu-jammy | + 2025-11-11 00:02:45.540025 | ubuntu-jammy | +## Library search paths 2025-11-11 00:02:45.540140 | ubuntu-jammy | +-w /etc/ld.so.conf -p wa -k libpath 2025-11-11 00:02:45.540257 | ubuntu-jammy | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-11-11 00:02:45.540370 | ubuntu-jammy | + 2025-11-11 00:02:45.540487 | ubuntu-jammy | +## Systemwide library preloads (LD_PRELOAD) 2025-11-11 00:02:45.540601 | ubuntu-jammy | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-11-11 00:02:45.540726 | ubuntu-jammy | + 2025-11-11 00:02:45.540840 | ubuntu-jammy | +## Pam configuration 2025-11-11 00:02:45.540954 | ubuntu-jammy | +-w /etc/pam.d/ -p wa -k pam 2025-11-11 00:02:45.541073 | ubuntu-jammy | +-w /etc/security/limits.conf -p wa -k pam 2025-11-11 00:02:45.541191 | ubuntu-jammy | +-w /etc/security/limits.d -p wa -k pam 2025-11-11 00:02:45.541307 | ubuntu-jammy | +-w /etc/security/pam_env.conf -p wa -k pam 2025-11-11 00:02:45.541422 | ubuntu-jammy | +-w /etc/security/namespace.conf -p wa -k pam 2025-11-11 00:02:45.541537 | ubuntu-jammy | +-w /etc/security/namespace.d -p wa -k pam 2025-11-11 00:02:45.541652 | ubuntu-jammy | +-w /etc/security/namespace.init -p wa -k pam 2025-11-11 00:02:45.541776 | ubuntu-jammy | + 2025-11-11 00:02:45.541946 | ubuntu-jammy | +## Mail configuration 2025-11-11 00:02:45.542075 | ubuntu-jammy | +-w /etc/aliases -p wa -k mail 2025-11-11 00:02:45.542192 | ubuntu-jammy | +-w /etc/postfix/ -p wa -k mail 2025-11-11 00:02:45.542333 | ubuntu-jammy | +-w /etc/exim4/ -p wa -k mail 2025-11-11 00:02:45.542450 | ubuntu-jammy | + 2025-11-11 00:02:45.542565 | ubuntu-jammy | +## SSH configuration 2025-11-11 00:02:45.542691 | ubuntu-jammy | +-w /etc/ssh/sshd_config -k sshd 2025-11-11 00:02:45.542810 | ubuntu-jammy | +-w /etc/ssh/sshd_config.d -k sshd 2025-11-11 00:02:45.542920 | ubuntu-jammy | + 2025-11-11 00:02:45.543034 | ubuntu-jammy | +## root ssh key tampering 2025-11-11 00:02:45.543149 | ubuntu-jammy | +-w /root/.ssh -p wa -k rootkey 2025-11-11 00:02:45.543261 | ubuntu-jammy | + 2025-11-11 00:02:45.543377 | ubuntu-jammy | +# Systemd 2025-11-11 00:02:45.543492 | ubuntu-jammy | +-w /bin/systemctl -p x -k systemd 2025-11-11 00:02:45.543604 | ubuntu-jammy | +-w /etc/systemd/ -p wa -k systemd 2025-11-11 00:02:45.543744 | ubuntu-jammy | +-w /usr/lib/systemd -p wa -k systemd 2025-11-11 00:02:45.543873 | ubuntu-jammy | + 2025-11-11 00:02:45.543991 | ubuntu-jammy | +## https://systemd.network/systemd.generator.html 2025-11-11 00:02:45.544106 | ubuntu-jammy | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:45.544224 | ubuntu-jammy | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:45.544342 | ubuntu-jammy | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-11-11 00:02:45.544455 | ubuntu-jammy | + 2025-11-11 00:02:45.544572 | ubuntu-jammy | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:45.544700 | ubuntu-jammy | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:45.544817 | ubuntu-jammy | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:45.544927 | ubuntu-jammy | + 2025-11-11 00:02:45.545045 | ubuntu-jammy | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-11-11 00:02:45.545161 | ubuntu-jammy | +-w /etc/selinux/ -p wa -k mac_policy 2025-11-11 00:02:45.545272 | ubuntu-jammy | + 2025-11-11 00:02:45.545392 | ubuntu-jammy | +## Critical elements access failures 2025-11-11 00:02:45.545516 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.545637 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.545784 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.545906 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.546028 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.546149 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.546272 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.546411 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-11-11 00:02:45.546526 | ubuntu-jammy | + 2025-11-11 00:02:45.546643 | ubuntu-jammy | +## Process ID change (switching accounts) applications 2025-11-11 00:02:45.546779 | ubuntu-jammy | +-w /bin/su -p x -k priv_esc 2025-11-11 00:02:45.546896 | ubuntu-jammy | +-w /usr/bin/sudo -p x -k priv_esc 2025-11-11 00:02:45.547008 | ubuntu-jammy | + 2025-11-11 00:02:45.547121 | ubuntu-jammy | +## Power state 2025-11-11 00:02:45.547237 | ubuntu-jammy | +-w /sbin/shutdown -p x -k power 2025-11-11 00:02:45.547352 | ubuntu-jammy | +-w /sbin/poweroff -p x -k power 2025-11-11 00:02:45.548006 | ubuntu-jammy | +-w /sbin/reboot -p x -k power 2025-11-11 00:02:45.548379 | ubuntu-jammy | +-w /sbin/halt -p x -k power 2025-11-11 00:02:45.548514 | ubuntu-jammy | + 2025-11-11 00:02:45.548637 | ubuntu-jammy | +## Session initiation information 2025-11-11 00:02:45.548771 | ubuntu-jammy | +-w /var/run/utmp -p wa -k session 2025-11-11 00:02:45.548890 | ubuntu-jammy | +-w /var/log/btmp -p wa -k session 2025-11-11 00:02:45.549007 | ubuntu-jammy | +-w /var/log/wtmp -p wa -k session 2025-11-11 00:02:45.549120 | ubuntu-jammy | + 2025-11-11 00:02:45.549238 | ubuntu-jammy | +## Discretionary Access Control (DAC) modifications 2025-11-11 00:02:45.549359 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.549482 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.549602 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.549747 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.549868 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.549984 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550105 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550222 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550365 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550490 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550607 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.550904 | ubuntu-jammy | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.551032 | ubuntu-jammy | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:45.551149 | ubuntu-jammy | + 2025-11-11 00:02:45.551266 | ubuntu-jammy | +# Special Rules --------------------------------------------------------------- 2025-11-11 00:02:45.551378 | ubuntu-jammy | + 2025-11-11 00:02:45.551492 | ubuntu-jammy | +## Reconnaissance 2025-11-11 00:02:45.551611 | ubuntu-jammy | +-w /usr/bin/whoami -p x -k recon 2025-11-11 00:02:45.551756 | ubuntu-jammy | +-w /usr/bin/id -p x -k recon 2025-11-11 00:02:45.551875 | ubuntu-jammy | +-w /bin/hostname -p x -k recon 2025-11-11 00:02:45.551991 | ubuntu-jammy | +-w /bin/uname -p x -k recon 2025-11-11 00:02:45.552107 | ubuntu-jammy | +-w /etc/issue -p r -k recon 2025-11-11 00:02:45.552223 | ubuntu-jammy | +-w /etc/hostname -p r -k recon 2025-11-11 00:02:45.552336 | ubuntu-jammy | + 2025-11-11 00:02:45.552509 | ubuntu-jammy | +## Suspicious activity 2025-11-11 00:02:45.552633 | ubuntu-jammy | +-w /usr/bin/wget -p x -k susp_activity 2025-11-11 00:02:45.552763 | ubuntu-jammy | +-w /usr/bin/curl -p x -k susp_activity 2025-11-11 00:02:45.552879 | ubuntu-jammy | +-w /usr/bin/base64 -p x -k susp_activity 2025-11-11 00:02:45.552994 | ubuntu-jammy | +-w /bin/nc -p x -k susp_activity 2025-11-11 00:02:45.553110 | ubuntu-jammy | +-w /bin/netcat -p x -k susp_activity 2025-11-11 00:02:45.553228 | ubuntu-jammy | +-w /usr/bin/ncat -p x -k susp_activity 2025-11-11 00:02:45.553344 | ubuntu-jammy | +-w /usr/bin/ss -p x -k susp_activity 2025-11-11 00:02:45.553460 | ubuntu-jammy | +-w /usr/bin/netstat -p x -k susp_activity 2025-11-11 00:02:45.553575 | ubuntu-jammy | +-w /usr/bin/ssh -p x -k susp_activity 2025-11-11 00:02:45.553704 | ubuntu-jammy | +-w /usr/bin/scp -p x -k susp_activity 2025-11-11 00:02:45.553822 | ubuntu-jammy | +-w /usr/bin/sftp -p x -k susp_activity 2025-11-11 00:02:45.553939 | ubuntu-jammy | +-w /usr/bin/ftp -p x -k susp_activity 2025-11-11 00:02:45.554056 | ubuntu-jammy | +-w /usr/bin/socat -p x -k susp_activity 2025-11-11 00:02:45.554179 | ubuntu-jammy | +-w /usr/bin/wireshark -p x -k susp_activity 2025-11-11 00:02:45.554310 | ubuntu-jammy | +-w /usr/bin/tshark -p x -k susp_activity 2025-11-11 00:02:45.554430 | ubuntu-jammy | +-w /usr/bin/rawshark -p x -k susp_activity 2025-11-11 00:02:45.554548 | ubuntu-jammy | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:45.554722 | ubuntu-jammy | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:45.554848 | ubuntu-jammy | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-11-11 00:02:45.554964 | ubuntu-jammy | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:45.555080 | ubuntu-jammy | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:45.555194 | ubuntu-jammy | +-w /usr/bin/nmap -p x -k susp_activity 2025-11-11 00:02:45.555307 | ubuntu-jammy | + 2025-11-11 00:02:45.555420 | ubuntu-jammy | +## sssd 2025-11-11 00:02:45.555546 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.555683 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.555808 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.555929 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.556113 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.556251 | ubuntu-jammy | + 2025-11-11 00:02:45.556368 | ubuntu-jammy | +## T1002 Data Compressed 2025-11-11 00:02:45.556479 | ubuntu-jammy | + 2025-11-11 00:02:45.556595 | ubuntu-jammy | +-w /usr/bin/zip -p x -k Data_Compressed 2025-11-11 00:02:45.556734 | ubuntu-jammy | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-11-11 00:02:45.556856 | ubuntu-jammy | +-w /usr/bin/tar -p x -k Data_Compressed 2025-11-11 00:02:45.556972 | ubuntu-jammy | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-11-11 00:02:45.557085 | ubuntu-jammy | + 2025-11-11 00:02:45.557206 | ubuntu-jammy | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:45.557323 | ubuntu-jammy | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:45.557435 | ubuntu-jammy | + 2025-11-11 00:02:45.557550 | ubuntu-jammy | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:45.557779 | ubuntu-jammy | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:45.557898 | ubuntu-jammy | + 2025-11-11 00:02:45.558015 | ubuntu-jammy | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:45.558134 | ubuntu-jammy | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:45.558246 | ubuntu-jammy | + 2025-11-11 00:02:45.558392 | ubuntu-jammy | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:45.558511 | ubuntu-jammy | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:45.558624 | ubuntu-jammy | + 2025-11-11 00:02:45.558749 | ubuntu-jammy | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:45.558866 | ubuntu-jammy | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:45.558979 | ubuntu-jammy | + 2025-11-11 00:02:45.559093 | ubuntu-jammy | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:45.559210 | ubuntu-jammy | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:45.559320 | ubuntu-jammy | + 2025-11-11 00:02:45.559434 | ubuntu-jammy | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:45.559553 | ubuntu-jammy | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:45.559688 | ubuntu-jammy | + 2025-11-11 00:02:45.559812 | ubuntu-jammy | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:45.559928 | ubuntu-jammy | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:45.560042 | ubuntu-jammy | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:45.560159 | ubuntu-jammy | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:45.560269 | ubuntu-jammy | + 2025-11-11 00:02:45.560383 | ubuntu-jammy | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:45.560497 | ubuntu-jammy | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:45.560608 | ubuntu-jammy | + 2025-11-11 00:02:45.560734 | ubuntu-jammy | +## Added to catch netcat on Ubuntu 2025-11-11 00:02:45.560851 | ubuntu-jammy | +-w /bin/nc.openbsd -p x -k susp_activity 2025-11-11 00:02:45.560964 | ubuntu-jammy | +-w /bin/nc.traditional -p x -k susp_activity 2025-11-11 00:02:45.561075 | ubuntu-jammy | + 2025-11-11 00:02:45.561191 | ubuntu-jammy | +## Sbin suspicious activity 2025-11-11 00:02:45.561306 | ubuntu-jammy | +-w /sbin/iptables -p x -k sbin_susp 2025-11-11 00:02:45.561422 | ubuntu-jammy | +-w /sbin/ip6tables -p x -k sbin_susp 2025-11-11 00:02:45.561536 | ubuntu-jammy | +-w /sbin/ifconfig -p x -k sbin_susp 2025-11-11 00:02:45.561650 | ubuntu-jammy | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-11-11 00:02:45.561774 | ubuntu-jammy | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-11-11 00:02:45.561889 | ubuntu-jammy | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-11-11 00:02:45.562013 | ubuntu-jammy | +-w /usr/sbin/nft -p x -k sbin_susp 2025-11-11 00:02:45.562129 | ubuntu-jammy | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-11-11 00:02:45.562244 | ubuntu-jammy | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-11-11 00:02:45.562376 | ubuntu-jammy | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-11-11 00:02:45.562490 | ubuntu-jammy | + 2025-11-11 00:02:45.562602 | ubuntu-jammy | +### kde4 2025-11-11 00:02:45.562752 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.562880 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:45.562993 | ubuntu-jammy | + 2025-11-11 00:02:45.563108 | ubuntu-jammy | +## dbus-send invocation 2025-11-11 00:02:45.563225 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-3560 2025-11-11 00:02:45.563340 | ubuntu-jammy | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-11-11 00:02:45.563455 | ubuntu-jammy | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-11-11 00:02:45.563566 | ubuntu-jammy | + 2025-11-11 00:02:45.563690 | ubuntu-jammy | +## pkexec invocation 2025-11-11 00:02:45.563809 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-4034 2025-11-11 00:02:45.563929 | ubuntu-jammy | +-w /usr/bin/pkexec -p x -k pkexec 2025-11-11 00:02:45.564043 | ubuntu-jammy | + 2025-11-11 00:02:45.564159 | ubuntu-jammy | +## Suspicious shells 2025-11-11 00:02:45.564277 | ubuntu-jammy | +-w /bin/ash -p x -k susp_shell 2025-11-11 00:02:45.564394 | ubuntu-jammy | +-w /bin/csh -p x -k susp_shell 2025-11-11 00:02:45.564511 | ubuntu-jammy | +-w /bin/fish -p x -k susp_shell 2025-11-11 00:02:45.564627 | ubuntu-jammy | +-w /bin/tcsh -p x -k susp_shell 2025-11-11 00:02:45.564755 | ubuntu-jammy | +-w /bin/tclsh -p x -k susp_shell 2025-11-11 00:02:45.564872 | ubuntu-jammy | +-w /bin/xonsh -p x -k susp_shell 2025-11-11 00:02:45.564987 | ubuntu-jammy | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-11-11 00:02:45.565102 | ubuntu-jammy | +-w /bin/open -p x -k susp_shell 2025-11-11 00:02:45.565216 | ubuntu-jammy | +-w /bin/rbash -p x -k susp_shell 2025-11-11 00:02:45.565328 | ubuntu-jammy | + 2025-11-11 00:02:45.565442 | ubuntu-jammy | +# Web Server Actvity 2025-11-11 00:02:45.565564 | ubuntu-jammy | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-11-11 00:02:45.565705 | ubuntu-jammy | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-11-11 00:02:45.565819 | ubuntu-jammy | + 2025-11-11 00:02:45.565933 | ubuntu-jammy | +### https://clustershell.readthedocs.io/ 2025-11-11 00:02:45.566046 | ubuntu-jammy | +-w /bin/clush -p x -k susp_shell 2025-11-11 00:02:45.566161 | ubuntu-jammy | +-w /usr/local/bin/clush -p x -k susp_shell 2025-11-11 00:02:45.566278 | ubuntu-jammy | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-11-11 00:02:45.566414 | ubuntu-jammy | + 2025-11-11 00:02:45.566532 | ubuntu-jammy | +### https://github.com/tmux/tmux 2025-11-11 00:02:45.566649 | ubuntu-jammy | +-w /bin/tmux -p x -k susp_shell 2025-11-11 00:02:45.566777 | ubuntu-jammy | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-11-11 00:02:45.566888 | ubuntu-jammy | + 2025-11-11 00:02:45.567004 | ubuntu-jammy | +## Shell/profile configurations 2025-11-11 00:02:45.567120 | ubuntu-jammy | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-11-11 00:02:45.567234 | ubuntu-jammy | +-w /etc/profile -p wa -k shell_profiles 2025-11-11 00:02:45.567349 | ubuntu-jammy | +-w /etc/shells -p wa -k shell_profiles 2025-11-11 00:02:45.567463 | ubuntu-jammy | +-w /etc/bashrc -p wa -k shell_profiles 2025-11-11 00:02:45.567578 | ubuntu-jammy | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-11-11 00:02:45.567717 | ubuntu-jammy | +-w /etc/csh.login -p wa -k shell_profiles 2025-11-11 00:02:45.567841 | ubuntu-jammy | +-w /etc/fish/ -p wa -k shell_profiles 2025-11-11 00:02:45.567957 | ubuntu-jammy | +-w /etc/zsh/ -p wa -k shell_profiles 2025-11-11 00:02:45.568072 | ubuntu-jammy | + 2025-11-11 00:02:45.568186 | ubuntu-jammy | +### https://github.com/xxh/xxh 2025-11-11 00:02:45.568302 | ubuntu-jammy | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-11-11 00:02:45.568418 | ubuntu-jammy | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-11-11 00:02:45.568534 | ubuntu-jammy | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-11-11 00:02:45.568645 | ubuntu-jammy | + 2025-11-11 00:02:45.568772 | ubuntu-jammy | +## Injection 2025-11-11 00:02:45.568888 | ubuntu-jammy | +### These rules watch for code injection by the ptrace facility. 2025-11-11 00:02:45.569007 | ubuntu-jammy | +### This could indicate someone trying to do something bad or just debugging 2025-11-11 00:02:45.569124 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-11-11 00:02:45.569241 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-11-11 00:02:45.569368 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-11-11 00:02:45.569488 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-11-11 00:02:45.569599 | ubuntu-jammy | + 2025-11-11 00:02:45.569738 | ubuntu-jammy | +## Anonymous File Creation 2025-11-11 00:02:45.569859 | ubuntu-jammy | +### These rules watch the use of memfd_create 2025-11-11 00:02:45.569982 | ubuntu-jammy | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-11-11 00:02:45.570106 | ubuntu-jammy | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-11-11 00:02:45.570223 | ubuntu-jammy | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-11-11 00:02:45.570365 | ubuntu-jammy | + 2025-11-11 00:02:45.570485 | ubuntu-jammy | +## Privilege Abuse 2025-11-11 00:02:45.570609 | ubuntu-jammy | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-11-11 00:02:45.570750 | ubuntu-jammy | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-11-11 00:02:45.570863 | ubuntu-jammy | + 2025-11-11 00:02:45.570977 | ubuntu-jammy | +# Socket Creations 2025-11-11 00:02:45.571095 | ubuntu-jammy | +# will catch both IPv4 and IPv6 2025-11-11 00:02:45.571209 | ubuntu-jammy | + 2025-11-11 00:02:45.571325 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:45.571443 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:45.571557 | ubuntu-jammy | + 2025-11-11 00:02:45.571699 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:45.571821 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:45.571936 | ubuntu-jammy | + 2025-11-11 00:02:45.572051 | ubuntu-jammy | +# Software Management --------------------------------------------------------- 2025-11-11 00:02:45.572164 | ubuntu-jammy | + 2025-11-11 00:02:45.572279 | ubuntu-jammy | +# RPM (Redhat/CentOS) 2025-11-11 00:02:45.572395 | ubuntu-jammy | +-w /usr/bin/rpm -p x -k software_mgmt 2025-11-11 00:02:45.572512 | ubuntu-jammy | +-w /usr/bin/yum -p x -k software_mgmt 2025-11-11 00:02:45.572625 | ubuntu-jammy | + 2025-11-11 00:02:45.572757 | ubuntu-jammy | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-11-11 00:02:45.572878 | ubuntu-jammy | +-w /usr/bin/dnf -p x -k software_mgmt 2025-11-11 00:02:45.572992 | ubuntu-jammy | + 2025-11-11 00:02:45.573109 | ubuntu-jammy | +# YAST/Zypper/RPM (SuSE) 2025-11-11 00:02:45.573224 | ubuntu-jammy | +-w /sbin/yast -p x -k software_mgmt 2025-11-11 00:02:45.573342 | ubuntu-jammy | +-w /sbin/yast2 -p x -k software_mgmt 2025-11-11 00:02:45.573457 | ubuntu-jammy | +-w /bin/rpm -p x -k software_mgmt 2025-11-11 00:02:45.573575 | ubuntu-jammy | +-w /usr/bin/zypper -k software_mgmt 2025-11-11 00:02:45.573699 | ubuntu-jammy | + 2025-11-11 00:02:45.573817 | ubuntu-jammy | +# DPKG / APT-GET (Debian/Ubuntu) 2025-11-11 00:02:45.573934 | ubuntu-jammy | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-11-11 00:02:45.574051 | ubuntu-jammy | +-w /usr/bin/apt -p x -k software_mgmt 2025-11-11 00:02:45.574168 | ubuntu-jammy | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-11-11 00:02:45.574285 | ubuntu-jammy | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-11-11 00:02:45.574426 | ubuntu-jammy | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-11-11 00:02:45.574544 | ubuntu-jammy | +-w /usr/bin/wajig -p x -k software_mgmt 2025-11-11 00:02:45.574681 | ubuntu-jammy | +-w /usr/bin/snap -p x -k software_mgmt 2025-11-11 00:02:45.574801 | ubuntu-jammy | + 2025-11-11 00:02:45.574919 | ubuntu-jammy | +# PIP(3) (Python installs) 2025-11-11 00:02:45.575038 | ubuntu-jammy | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575155 | ubuntu-jammy | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575275 | ubuntu-jammy | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575394 | ubuntu-jammy | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575509 | ubuntu-jammy | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575626 | ubuntu-jammy | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:45.575750 | ubuntu-jammy | + 2025-11-11 00:02:45.575866 | ubuntu-jammy | +# npm 2025-11-11 00:02:45.575981 | ubuntu-jammy | +## T1072 third party software 2025-11-11 00:02:45.576096 | ubuntu-jammy | +## https://www.npmjs.com 2025-11-11 00:02:45.576213 | ubuntu-jammy | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-11-11 00:02:45.576331 | ubuntu-jammy | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-11-11 00:02:45.576451 | ubuntu-jammy | + 2025-11-11 00:02:45.576569 | ubuntu-jammy | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-11-11 00:02:45.576695 | ubuntu-jammy | +## T1072 third party software 2025-11-11 00:02:45.576812 | ubuntu-jammy | +## https://www.cpan.org 2025-11-11 00:02:45.576928 | ubuntu-jammy | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-11-11 00:02:45.577041 | ubuntu-jammy | + 2025-11-11 00:02:45.577155 | ubuntu-jammy | +# Ruby (RubyGems installs) 2025-11-11 00:02:45.577269 | ubuntu-jammy | +## T1072 third party software 2025-11-11 00:02:45.577385 | ubuntu-jammy | +## https://rubygems.org 2025-11-11 00:02:45.577503 | ubuntu-jammy | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-11-11 00:02:45.577615 | ubuntu-jammy | + 2025-11-11 00:02:45.577756 | ubuntu-jammy | +# LuaRocks (Lua installs) 2025-11-11 00:02:45.577874 | ubuntu-jammy | +## T1072 third party software 2025-11-11 00:02:45.577990 | ubuntu-jammy | +## https://luarocks.org 2025-11-11 00:02:45.578108 | ubuntu-jammy | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-11-11 00:02:45.578219 | ubuntu-jammy | + 2025-11-11 00:02:45.578350 | ubuntu-jammy | +# Pacman (Arch Linux) 2025-11-11 00:02:45.578477 | ubuntu-jammy | +## https://wiki.archlinux.org/title/Pacman 2025-11-11 00:02:45.578593 | ubuntu-jammy | +## T1072 third party software 2025-11-11 00:02:45.578722 | ubuntu-jammy | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-11-11 00:02:45.578839 | ubuntu-jammy | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-11-11 00:02:45.578951 | ubuntu-jammy | + 2025-11-11 00:02:45.579073 | ubuntu-jammy | +# Special Software ------------------------------------------------------------ 2025-11-11 00:02:45.579186 | ubuntu-jammy | + 2025-11-11 00:02:45.579300 | ubuntu-jammy | +## GDS specific secrets 2025-11-11 00:02:45.579415 | ubuntu-jammy | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-11-11 00:02:45.579526 | ubuntu-jammy | + 2025-11-11 00:02:45.579642 | ubuntu-jammy | +## IBM Bigfix BESClient 2025-11-11 00:02:45.579777 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-11-11 00:02:45.579895 | ubuntu-jammy | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-11-11 00:02:45.580006 | ubuntu-jammy | + 2025-11-11 00:02:45.580124 | ubuntu-jammy | +## CHEF https://www.chef.io/chef/ 2025-11-11 00:02:45.580237 | ubuntu-jammy | +-w /etc/chef -p wa -k soft_chef 2025-11-11 00:02:45.580350 | ubuntu-jammy | + 2025-11-11 00:02:45.580466 | ubuntu-jammy | +## Salt 2025-11-11 00:02:45.580582 | ubuntu-jammy | +## https://saltproject.io/ 2025-11-11 00:02:45.580722 | ubuntu-jammy | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-11-11 00:02:45.580840 | ubuntu-jammy | +-w /etc/salt -p wa -k soft_salt 2025-11-11 00:02:45.580957 | ubuntu-jammy | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-11-11 00:02:45.581069 | ubuntu-jammy | + 2025-11-11 00:02:45.581182 | ubuntu-jammy | +## Otter 2025-11-11 00:02:45.581298 | ubuntu-jammy | +## https://inedo.com/otter 2025-11-11 00:02:45.581415 | ubuntu-jammy | +-w /etc/otter -p wa -k soft_otter 2025-11-11 00:02:45.581528 | ubuntu-jammy | + 2025-11-11 00:02:45.581642 | ubuntu-jammy | +## T1081 Credentials In Files 2025-11-11 00:02:45.581770 | ubuntu-jammy | +-w /usr/bin/grep -p x -k string_search 2025-11-11 00:02:45.581887 | ubuntu-jammy | +-w /usr/bin/egrep -p x -k string_search 2025-11-11 00:02:45.582011 | ubuntu-jammy | +-w /usr/bin/ugrep -p x -k string_search 2025-11-11 00:02:45.582136 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.582251 | ubuntu-jammy | +-w /usr/local/bin/grep -p x -k string_search 2025-11-11 00:02:45.582389 | ubuntu-jammy | +-w /usr/local/bin/egrep -p x -k string_search 2025-11-11 00:02:45.582508 | ubuntu-jammy | +-w /usr/local/bin/ugrep -p x -k string_search 2025-11-11 00:02:45.582622 | ubuntu-jammy | + 2025-11-11 00:02:45.582761 | ubuntu-jammy | +### https://github.com/tmbinc/bgrep 2025-11-11 00:02:45.582878 | ubuntu-jammy | +-w /usr/bin/bgrep -p x -k string_search 2025-11-11 00:02:45.582993 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.583108 | ubuntu-jammy | +-w /usr/local/bin/bgrep -p x -k string_search 2025-11-11 00:02:45.583221 | ubuntu-jammy | + 2025-11-11 00:02:45.583341 | ubuntu-jammy | +### https://github.com/BurntSushi/ripgrep 2025-11-11 00:02:45.583459 | ubuntu-jammy | +-w /usr/bin/rg -p x -k string_search 2025-11-11 00:02:45.583575 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.583700 | ubuntu-jammy | +-w /usr/local/bin/rg -p x -k string_search 2025-11-11 00:02:45.583815 | ubuntu-jammy | + 2025-11-11 00:02:45.583931 | ubuntu-jammy | +### https://github.com/awgn/cgrep 2025-11-11 00:02:45.584046 | ubuntu-jammy | + 2025-11-11 00:02:45.584164 | ubuntu-jammy | +-w /usr/bin/cgrep -p x -k string_search 2025-11-11 00:02:45.584280 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.584397 | ubuntu-jammy | +-w /usr/local/bin/cgrep -p x -k string_search 2025-11-11 00:02:45.584510 | ubuntu-jammy | + 2025-11-11 00:02:45.584625 | ubuntu-jammy | +### https://github.com/jpr5/ngrep 2025-11-11 00:02:45.584772 | ubuntu-jammy | +-w /usr/bin/ngrep -p x -k string_search 2025-11-11 00:02:45.584891 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.585006 | ubuntu-jammy | +-w /usr/local/bin/ngrep -p x -k string_search 2025-11-11 00:02:45.585118 | ubuntu-jammy | + 2025-11-11 00:02:45.585233 | ubuntu-jammy | +### https://github.com/vrothberg/vgrep 2025-11-11 00:02:45.585349 | ubuntu-jammy | +-w /usr/bin/vgrep -p x -k string_search 2025-11-11 00:02:45.585464 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.585580 | ubuntu-jammy | +-w /usr/local/bin/vgrep -p x -k string_search 2025-11-11 00:02:45.585705 | ubuntu-jammy | + 2025-11-11 00:02:45.585824 | ubuntu-jammy | +### https://github.com/monochromegane/the_platinum_searcher 2025-11-11 00:02:45.585939 | ubuntu-jammy | +-w /usr/bin/pt -p x -k string_search 2025-11-11 00:02:45.586052 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.586167 | ubuntu-jammy | +-w /usr/local/bin/pt -p x -k string_search 2025-11-11 00:02:45.586279 | ubuntu-jammy | + 2025-11-11 00:02:45.586410 | ubuntu-jammy | +### https://github.com/gvansickle/ucg 2025-11-11 00:02:45.586528 | ubuntu-jammy | +-w /usr/bin/ucg -p x -k string_search 2025-11-11 00:02:45.586643 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.586770 | ubuntu-jammy | +-w /usr/local/bin/ucg -p x -k string_search 2025-11-11 00:02:45.586883 | ubuntu-jammy | + 2025-11-11 00:02:45.587001 | ubuntu-jammy | +### https://github.com/ggreer/the_silver_searcher 2025-11-11 00:02:45.587117 | ubuntu-jammy | +-w /usr/bin/ag -p x -k string_search 2025-11-11 00:02:45.587230 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.587344 | ubuntu-jammy | +-w /usr/local/bin/ag -p x -k string_search 2025-11-11 00:02:45.587457 | ubuntu-jammy | + 2025-11-11 00:02:45.587572 | ubuntu-jammy | +### https://github.com/beyondgrep/ack3 2025-11-11 00:02:45.587697 | ubuntu-jammy | +### https://beyondgrep.com 2025-11-11 00:02:45.587813 | ubuntu-jammy | +-w /usr/bin/ack -p x -k string_search 2025-11-11 00:02:45.587929 | ubuntu-jammy | +-w /usr/local/bin/ack -p x -k string_search 2025-11-11 00:02:45.588045 | ubuntu-jammy | +-w /usr/bin/semgrep -p x -k string_search 2025-11-11 00:02:45.588157 | ubuntu-jammy | +### macOS 2025-11-11 00:02:45.588272 | ubuntu-jammy | +-w /usr/local/bin/semgrep -p x -k string_search 2025-11-11 00:02:45.588384 | ubuntu-jammy | + 2025-11-11 00:02:45.588498 | ubuntu-jammy | +## Docker 2025-11-11 00:02:45.588615 | ubuntu-jammy | +-w /usr/bin/dockerd -k docker 2025-11-11 00:02:45.588756 | ubuntu-jammy | +-w /usr/bin/docker -k docker 2025-11-11 00:02:45.588873 | ubuntu-jammy | +-w /usr/bin/docker-containerd -k docker 2025-11-11 00:02:45.588990 | ubuntu-jammy | +-w /usr/bin/docker-runc -k docker 2025-11-11 00:02:45.589110 | ubuntu-jammy | +-w /var/lib/docker -p wa -k docker 2025-11-11 00:02:45.589225 | ubuntu-jammy | +-w /etc/docker -k docker 2025-11-11 00:02:45.589341 | ubuntu-jammy | +-w /etc/sysconfig/docker -k docker 2025-11-11 00:02:45.589458 | ubuntu-jammy | +-w /etc/sysconfig/docker-storage -k docker 2025-11-11 00:02:45.589574 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.service -k docker 2025-11-11 00:02:45.589700 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-11-11 00:02:45.589816 | ubuntu-jammy | + 2025-11-11 00:02:45.589931 | ubuntu-jammy | +## Virtualization stuff 2025-11-11 00:02:45.590050 | ubuntu-jammy | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-11-11 00:02:45.590167 | ubuntu-jammy | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-11-11 00:02:45.590281 | ubuntu-jammy | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-11-11 00:02:45.590420 | ubuntu-jammy | +-w /usr/bin/qemu -p x -k qemu 2025-11-11 00:02:45.590538 | ubuntu-jammy | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-11-11 00:02:45.590655 | ubuntu-jammy | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-11-11 00:02:45.590781 | ubuntu-jammy | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-11-11 00:02:45.590893 | ubuntu-jammy | + 2025-11-11 00:02:45.591011 | ubuntu-jammy | +#### VirtualBox on macOS 2025-11-11 00:02:45.591122 | ubuntu-jammy | + 2025-11-11 00:02:45.591239 | ubuntu-jammy | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-11-11 00:02:45.591363 | ubuntu-jammy | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-11-11 00:02:45.591481 | ubuntu-jammy | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-11-11 00:02:45.591596 | ubuntu-jammy | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-11-11 00:02:45.591726 | ubuntu-jammy | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-11-11 00:02:45.591845 | ubuntu-jammy | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-11-11 00:02:45.591962 | ubuntu-jammy | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-11-11 00:02:45.592079 | ubuntu-jammy | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-11-11 00:02:45.592196 | ubuntu-jammy | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-11-11 00:02:45.592364 | ubuntu-jammy | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-11-11 00:02:45.592484 | ubuntu-jammy | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-11-11 00:02:45.592611 | ubuntu-jammy | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-11-11 00:02:45.592754 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-11-11 00:02:45.592873 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-11-11 00:02:45.592990 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-11-11 00:02:45.593109 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-11-11 00:02:45.593226 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-11-11 00:02:45.593338 | ubuntu-jammy | + 2025-11-11 00:02:45.593453 | ubuntu-jammy | +### Parallels Desktop on macOS 2025-11-11 00:02:45.593566 | ubuntu-jammy | + 2025-11-11 00:02:45.593694 | ubuntu-jammy | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-11-11 00:02:45.593812 | ubuntu-jammy | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-11-11 00:02:45.593928 | ubuntu-jammy | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-11-11 00:02:45.594044 | ubuntu-jammy | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-11-11 00:02:45.594160 | ubuntu-jammy | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-11-11 00:02:45.594277 | ubuntu-jammy | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-11-11 00:02:45.594412 | ubuntu-jammy | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-11-11 00:02:45.594532 | ubuntu-jammy | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-11-11 00:02:45.594643 | ubuntu-jammy | + 2025-11-11 00:02:45.594770 | ubuntu-jammy | +### qemu on macOS 2025-11-11 00:02:45.594882 | ubuntu-jammy | + 2025-11-11 00:02:45.594999 | ubuntu-jammy | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-11-11 00:02:45.595114 | ubuntu-jammy | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-11-11 00:02:45.595230 | ubuntu-jammy | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-11-11 00:02:45.595345 | ubuntu-jammy | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-11-11 00:02:45.595462 | ubuntu-jammy | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-11-11 00:02:45.595572 | ubuntu-jammy | + 2025-11-11 00:02:45.595711 | ubuntu-jammy | +## Kubelet 2025-11-11 00:02:45.595830 | ubuntu-jammy | +-w /usr/bin/kubelet -k kubelet 2025-11-11 00:02:45.595943 | ubuntu-jammy | + 2025-11-11 00:02:45.596058 | ubuntu-jammy | +# ipc system call 2025-11-11 00:02:45.596173 | ubuntu-jammy | +# /usr/include/linux/ipc.h 2025-11-11 00:02:45.596285 | ubuntu-jammy | + 2025-11-11 00:02:45.596402 | ubuntu-jammy | +## msgctl 2025-11-11 00:02:45.596522 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-11-11 00:02:45.596637 | ubuntu-jammy | +## msgget 2025-11-11 00:02:45.596767 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-11-11 00:02:45.596889 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:45.597010 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-11-11 00:02:45.597128 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-11-11 00:02:45.597243 | ubuntu-jammy | + 2025-11-11 00:02:45.597360 | ubuntu-jammy | +## semctl 2025-11-11 00:02:45.597479 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-11-11 00:02:45.597594 | ubuntu-jammy | +## semget 2025-11-11 00:02:45.597721 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-11-11 00:02:45.597836 | ubuntu-jammy | +## semop 2025-11-11 00:02:45.597951 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-11-11 00:02:45.598065 | ubuntu-jammy | +## semtimedop 2025-11-11 00:02:45.598181 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-11-11 00:02:45.598320 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:45.598441 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-11-11 00:02:45.598558 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-11-11 00:02:45.598684 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-11-11 00:02:45.598809 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-11-11 00:02:45.598924 | ubuntu-jammy | + 2025-11-11 00:02:45.599039 | ubuntu-jammy | +## shmctl 2025-11-11 00:02:45.599157 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-11-11 00:02:45.599272 | ubuntu-jammy | +## shmget 2025-11-11 00:02:45.599393 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-11-11 00:02:45.599516 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:45.599634 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-11-11 00:02:45.599775 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-11-11 00:02:45.599890 | ubuntu-jammy | + 2025-11-11 00:02:45.600006 | ubuntu-jammy | +# High Volume Events ---------------------------------------------------------- 2025-11-11 00:02:45.600118 | ubuntu-jammy | + 2025-11-11 00:02:45.600235 | ubuntu-jammy | +## Disable these rules if they create too many events in your environment 2025-11-11 00:02:45.600399 | ubuntu-jammy | + 2025-11-11 00:02:45.600523 | ubuntu-jammy | +## Common Shells 2025-11-11 00:02:45.600640 | ubuntu-jammy | +-w /bin/bash -p x -k susp_shell 2025-11-11 00:02:45.600771 | ubuntu-jammy | +-w /bin/dash -p x -k susp_shell 2025-11-11 00:02:45.600893 | ubuntu-jammy | +-w /bin/busybox -p x -k susp_shell 2025-11-11 00:02:45.601011 | ubuntu-jammy | +-w /bin/zsh -p x -k susp_shell 2025-11-11 00:02:45.601128 | ubuntu-jammy | +-w /bin/sh -p x -k susp_shell 2025-11-11 00:02:45.601245 | ubuntu-jammy | +-w /bin/ksh -p x -k susp_shell 2025-11-11 00:02:45.601358 | ubuntu-jammy | + 2025-11-11 00:02:45.601475 | ubuntu-jammy | +## Root command executions 2025-11-11 00:02:45.601600 | ubuntu-jammy | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-11-11 00:02:45.601726 | ubuntu-jammy | + 2025-11-11 00:02:45.601980 | ubuntu-jammy | +## File Deletion Events by User 2025-11-11 00:02:45.602130 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-11-11 00:02:45.602249 | ubuntu-jammy | + 2025-11-11 00:02:45.602382 | ubuntu-jammy | +## File Access 2025-11-11 00:02:45.602503 | ubuntu-jammy | +### Unauthorized Access (unsuccessful) 2025-11-11 00:02:45.602632 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:45.602774 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:45.602891 | ubuntu-jammy | + 2025-11-11 00:02:45.603007 | ubuntu-jammy | +### Unsuccessful Creation 2025-11-11 00:02:45.603132 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-11-11 00:02:45.603254 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-11-11 00:02:45.603367 | ubuntu-jammy | + 2025-11-11 00:02:45.603481 | ubuntu-jammy | +### Unsuccessful Modification 2025-11-11 00:02:45.603604 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-11-11 00:02:45.603758 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-11-11 00:02:45.603875 | ubuntu-jammy | + 2025-11-11 00:02:45.603992 | ubuntu-jammy | +## 32bit API Exploitation 2025-11-11 00:02:45.604110 | ubuntu-jammy | +### If you are on a 64 bit platform, everything _should_ be running 2025-11-11 00:02:45.604230 | ubuntu-jammy | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-11-11 00:02:45.604347 | ubuntu-jammy | +### because this might be a sign of someone exploiting a hole in the 32 2025-11-11 00:02:45.604462 | ubuntu-jammy | +### bit API. 2025-11-11 00:02:45.604578 | ubuntu-jammy | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-11-11 00:02:45.604702 | ubuntu-jammy | + 2025-11-11 00:02:45.604821 | ubuntu-jammy | +# Make The Configuration Immutable -------------------------------------------- 2025-11-11 00:02:45.604935 | ubuntu-jammy | + 2025-11-11 00:02:45.605049 | ubuntu-jammy | +##-e 2 2025-11-11 00:02:45.605160 | ubuntu-jammy | 2025-11-11 00:02:45.605401 | ubuntu-jammy | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819364.5990295-1904-229183410798066/.source.rules", "state": "file", "uid": 0} 2025-11-11 00:02:45.605526 | ubuntu-jammy | 2025-11-11 00:02:45.605651 | ubuntu-jammy | TASK [auditd : Manage auditd service] ****************************************** 2025-11-11 00:02:45.850250 | centos-9-stream | --- before: /usr/lib/systemd/system/auditd.service (content) 2025-11-11 00:02:45.850387 | centos-9-stream | +++ after: /usr/lib/systemd/system/auditd.service (content) 2025-11-11 00:02:45.850406 | centos-9-stream | @@ -14,7 +14,7 @@ 2025-11-11 00:02:45.850514 | centos-9-stream | Before=sysinit.target shutdown.target 2025-11-11 00:02:45.850618 | centos-9-stream | ##Before=shutdown.target 2025-11-11 00:02:45.850741 | centos-9-stream | Conflicts=shutdown.target 2025-11-11 00:02:45.850846 | centos-9-stream | -RefuseManualStop=yes 2025-11-11 00:02:45.850951 | centos-9-stream | +#RefuseManualStop=yes 2025-11-11 00:02:45.851059 | centos-9-stream | ConditionKernelCommandLine=!audit=0 2025-11-11 00:02:45.851215 | centos-9-stream | ConditionKernelCommandLine=!audit=off 2025-11-11 00:02:45.851324 | centos-9-stream | 2025-11-11 00:02:45.851421 | centos-9-stream | 2025-11-11 00:02:45.851540 | centos-9-stream | changed: [molecule-auditd] => {"backup": "", "changed": true, "msg": "line replaced"} 2025-11-11 00:02:45.851636 | centos-9-stream | 2025-11-11 00:02:45.851761 | centos-9-stream | TASK [auditd : Reload systemd daemon] ****************************************** 2025-11-11 00:02:46.309939 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ActiveEnterTimestampMonotonic": "283169826", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:39 UTC", "AssertTimestampMonotonic": "283139146", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "33190000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ConditionTimestampMonotonic": "283139109", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1678", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ExecMainStartTimestampMonotonic": "283151042", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1677 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1677 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1681 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1681 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:39 UTC", "InactiveExitTimestampMonotonic": "283140283", "InvocationID": "9555246b5ee6476d9c31cada86905e70", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15329", "LimitNPROCSoft": "15329", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15329", "LimitSIGPENDINGSoft": "15329", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1678", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:39 UTC", "StateChangeTimestampMonotonic": "283169826", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4598", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:46.316904 | ubuntu-jammy | 2025-11-11 00:02:46.316938 | ubuntu-jammy | TASK [auditd : List existing rules files] ************************************** 2025-11-11 00:02:46.736586 | ubuntu-noble | --- before 2025-11-11 00:02:46.736613 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1921ulwuj054/tmp5boz4cr2/20-neo23x0.rules.j2 2025-11-11 00:02:46.736618 | ubuntu-noble | @@ -0,0 +1,750 @@ 2025-11-11 00:02:46.736622 | ubuntu-noble | +# ___ ___ __ __ 2025-11-11 00:02:46.736626 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2025-11-11 00:02:46.736630 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2025-11-11 00:02:46.736633 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-11-11 00:02:46.736641 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-11-11 00:02:46.736645 | ubuntu-noble | +# 2025-11-11 00:02:46.736649 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2025-11-11 00:02:46.736652 | ubuntu-noble | +# /etc/audit/audit.rules 2025-11-11 00:02:46.736656 | ubuntu-noble | +# 2025-11-11 00:02:46.736659 | ubuntu-noble | +# Compiled by Florian Roth 2025-11-11 00:02:46.736663 | ubuntu-noble | +# 2025-11-11 00:02:46.736673 | ubuntu-noble | +# Created : 2017/12/05 2025-11-11 00:02:46.736825 | ubuntu-noble | +# Modified : 2023/01/25 2025-11-11 00:02:46.736948 | ubuntu-noble | +# 2025-11-11 00:02:46.737085 | ubuntu-noble | +# Based on rules published here: 2025-11-11 00:02:46.737204 | ubuntu-noble | +# Gov.uk auditd rules 2025-11-11 00:02:46.737536 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-11-11 00:02:46.737741 | ubuntu-noble | +# CentOS 7 hardening 2025-11-11 00:02:46.737938 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-11-11 00:02:46.738135 | ubuntu-noble | +# Linux audit repo 2025-11-11 00:02:46.738311 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-11-11 00:02:46.741743 | ubuntu-noble | +# Auditd high performance linux auditing 2025-11-11 00:02:46.741762 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-11-11 00:02:46.741766 | ubuntu-noble | +# 2025-11-11 00:02:46.741770 | ubuntu-noble | +# Further rules 2025-11-11 00:02:46.741774 | ubuntu-noble | +# For PCI DSS compliance see: 2025-11-11 00:02:46.741777 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-11-11 00:02:46.741905 | ubuntu-noble | +# For NISPOM compliance see: 2025-11-11 00:02:46.742300 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-11-11 00:02:46.743171 | ubuntu-noble | + 2025-11-11 00:02:46.743452 | ubuntu-noble | +# Remove any existing rules 2025-11-11 00:02:46.743705 | ubuntu-noble | +-D 2025-11-11 00:02:46.743988 | ubuntu-noble | + 2025-11-11 00:02:46.744271 | ubuntu-noble | +# Buffer Size 2025-11-11 00:02:46.744530 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2025-11-11 00:02:46.744792 | ubuntu-noble | +-b 8192 2025-11-11 00:02:46.745034 | ubuntu-noble | + 2025-11-11 00:02:46.745278 | ubuntu-noble | +# Failure Mode 2025-11-11 00:02:46.745557 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-11-11 00:02:46.745811 | ubuntu-noble | +-f 1 2025-11-11 00:02:46.746090 | ubuntu-noble | + 2025-11-11 00:02:46.746333 | ubuntu-noble | +# Ignore errors 2025-11-11 00:02:46.746568 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2025-11-11 00:02:46.746821 | ubuntu-noble | +-i 2025-11-11 00:02:46.747050 | ubuntu-noble | + 2025-11-11 00:02:46.747273 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2025-11-11 00:02:46.747485 | ubuntu-noble | + 2025-11-11 00:02:46.747706 | ubuntu-noble | +## Audit the audit logs 2025-11-11 00:02:46.749742 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2025-11-11 00:02:46.749758 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2025-11-11 00:02:46.749763 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2025-11-11 00:02:46.749766 | ubuntu-noble | + 2025-11-11 00:02:46.749770 | ubuntu-noble | +## Auditd configuration 2025-11-11 00:02:46.749774 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-11-11 00:02:46.749777 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2025-11-11 00:02:46.749781 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-11-11 00:02:46.749815 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2025-11-11 00:02:46.750012 | ubuntu-noble | + 2025-11-11 00:02:46.750198 | ubuntu-noble | +## Monitor for use of audit management tools 2025-11-11 00:02:46.750384 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2025-11-11 00:02:46.750574 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2025-11-11 00:02:46.750779 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2025-11-11 00:02:46.750970 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2025-11-11 00:02:46.751160 | ubuntu-noble | + 2025-11-11 00:02:46.751348 | ubuntu-noble | +## Access to all audit trails 2025-11-11 00:02:46.751524 | ubuntu-noble | + 2025-11-11 00:02:46.751728 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-11-11 00:02:46.751930 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-11-11 00:02:46.752135 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-11-11 00:02:46.752328 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-11-11 00:02:46.752517 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-11-11 00:02:46.752694 | ubuntu-noble | + 2025-11-11 00:02:46.752893 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2025-11-11 00:02:46.753079 | ubuntu-noble | + 2025-11-11 00:02:46.753271 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2025-11-11 00:02:46.753447 | ubuntu-noble | + 2025-11-11 00:02:46.753636 | ubuntu-noble | +## Ignore SELinux AVC records 2025-11-11 00:02:46.753841 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2025-11-11 00:02:46.754053 | ubuntu-noble | + 2025-11-11 00:02:46.754236 | ubuntu-noble | +## Ignore current working directory records 2025-11-11 00:02:46.754413 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2025-11-11 00:02:46.754581 | ubuntu-noble | + 2025-11-11 00:02:46.754790 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-11-11 00:02:46.754964 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2025-11-11 00:02:46.755149 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2025-11-11 00:02:46.755314 | ubuntu-noble | + 2025-11-11 00:02:46.755493 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2025-11-11 00:02:46.755683 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-11-11 00:02:46.755880 | ubuntu-noble | + 2025-11-11 00:02:46.756078 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-11-11 00:02:46.756270 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-11-11 00:02:46.756423 | ubuntu-noble | + 2025-11-11 00:02:46.756596 | ubuntu-noble | +## Open VM Tools 2025-11-11 00:02:46.756794 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-11-11 00:02:46.756955 | ubuntu-noble | + 2025-11-11 00:02:46.757144 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2025-11-11 00:02:46.757345 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-11-11 00:02:46.757490 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-11-11 00:02:46.757654 | ubuntu-noble | + 2025-11-11 00:02:46.757859 | ubuntu-noble | +## FileBeat 2025-11-11 00:02:46.758070 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-11-11 00:02:46.758222 | ubuntu-noble | + 2025-11-11 00:02:46.758374 | ubuntu-noble | +## More information on how to filter events 2025-11-11 00:02:46.758527 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2025-11-11 00:02:46.758669 | ubuntu-noble | + 2025-11-11 00:02:46.758832 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2025-11-11 00:02:46.758982 | ubuntu-noble | + 2025-11-11 00:02:46.759132 | ubuntu-noble | +## Kernel parameters 2025-11-11 00:02:46.759284 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2025-11-11 00:02:46.759433 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2025-11-11 00:02:46.759577 | ubuntu-noble | + 2025-11-11 00:02:46.759745 | ubuntu-noble | +## Kernel module loading and unloading 2025-11-11 00:02:46.759901 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-11-11 00:02:46.760070 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-11-11 00:02:46.760227 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-11-11 00:02:46.760391 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-11-11 00:02:46.760545 | ubuntu-noble | + 2025-11-11 00:02:46.760685 | ubuntu-noble | +## Modprobe configuration 2025-11-11 00:02:46.760852 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2025-11-11 00:02:46.761014 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2025-11-11 00:02:46.761157 | ubuntu-noble | + 2025-11-11 00:02:46.761309 | ubuntu-noble | +## KExec usage (all actions) 2025-11-11 00:02:46.761463 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-11-11 00:02:46.761609 | ubuntu-noble | + 2025-11-11 00:02:46.761774 | ubuntu-noble | +## Special files 2025-11-11 00:02:46.761930 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-11-11 00:02:46.762101 | ubuntu-noble | + 2025-11-11 00:02:46.762241 | ubuntu-noble | +## Mount operations (only attributable) 2025-11-11 00:02:46.762381 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-11-11 00:02:46.762506 | ubuntu-noble | + 2025-11-11 00:02:46.762636 | ubuntu-noble | +### NFS mount 2025-11-11 00:02:46.762806 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.762949 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.763085 | ubuntu-noble | + 2025-11-11 00:02:46.763223 | ubuntu-noble | +## Change swap (only attributable) 2025-11-11 00:02:46.763364 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-11-11 00:02:46.763494 | ubuntu-noble | + 2025-11-11 00:02:46.763626 | ubuntu-noble | +## Time 2025-11-11 00:02:46.763808 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-11-11 00:02:46.763914 | ubuntu-noble | +### Local time zone 2025-11-11 00:02:46.764060 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2025-11-11 00:02:46.764188 | ubuntu-noble | + 2025-11-11 00:02:46.764320 | ubuntu-noble | +## Stunnel 2025-11-11 00:02:46.764453 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2025-11-11 00:02:46.764587 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2025-11-11 00:02:46.764728 | ubuntu-noble | + 2025-11-11 00:02:46.764888 | ubuntu-noble | +## Cron configuration & scheduled jobs 2025-11-11 00:02:46.765021 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2025-11-11 00:02:46.765153 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2025-11-11 00:02:46.765291 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2025-11-11 00:02:46.765424 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2025-11-11 00:02:46.765552 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2025-11-11 00:02:46.765687 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2025-11-11 00:02:46.765833 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2025-11-11 00:02:46.765967 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2025-11-11 00:02:46.766126 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2025-11-11 00:02:46.766257 | ubuntu-noble | + 2025-11-11 00:02:46.766389 | ubuntu-noble | +## User, group, password databases 2025-11-11 00:02:46.766519 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2025-11-11 00:02:46.766644 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2025-11-11 00:02:46.766796 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2025-11-11 00:02:46.766927 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2025-11-11 00:02:46.767250 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2025-11-11 00:02:46.767259 | ubuntu-noble | + 2025-11-11 00:02:46.767303 | ubuntu-noble | +## Sudoers file changes 2025-11-11 00:02:46.767431 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2025-11-11 00:02:46.767558 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2025-11-11 00:02:46.767760 | ubuntu-noble | + 2025-11-11 00:02:46.767817 | ubuntu-noble | +## Passwd 2025-11-11 00:02:46.768202 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2025-11-11 00:02:46.768213 | ubuntu-noble | + 2025-11-11 00:02:46.768218 | ubuntu-noble | +## Tools to change group identifiers 2025-11-11 00:02:46.768322 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2025-11-11 00:02:46.768439 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2025-11-11 00:02:46.768555 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2025-11-11 00:02:46.768674 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2025-11-11 00:02:46.768817 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2025-11-11 00:02:46.768932 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2025-11-11 00:02:46.769056 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2025-11-11 00:02:46.769201 | ubuntu-noble | + 2025-11-11 00:02:46.769387 | ubuntu-noble | +## Login configuration and information 2025-11-11 00:02:46.769395 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2025-11-11 00:02:46.769546 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2025-11-11 00:02:46.769623 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2025-11-11 00:02:46.769772 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2025-11-11 00:02:46.769873 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2025-11-11 00:02:46.769991 | ubuntu-noble | + 2025-11-11 00:02:46.770106 | ubuntu-noble | +## Network Environment 2025-11-11 00:02:46.770278 | ubuntu-noble | +### Changes to hostname 2025-11-11 00:02:46.770346 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-11-11 00:02:46.770765 | ubuntu-noble | + 2025-11-11 00:02:46.770777 | ubuntu-noble | +### Detect Remote Shell Use 2025-11-11 00:02:46.770781 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:46.770810 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:46.770920 | ubuntu-noble | + 2025-11-11 00:02:46.771099 | ubuntu-noble | +### Successful IPv4 Connections 2025-11-11 00:02:46.771358 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-11-11 00:02:46.771367 | ubuntu-noble | + 2025-11-11 00:02:46.771391 | ubuntu-noble | +### Successful IPv6 Connections 2025-11-11 00:02:46.771505 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-11-11 00:02:46.771602 | ubuntu-noble | + 2025-11-11 00:02:46.771705 | ubuntu-noble | +### Changes to other files 2025-11-11 00:02:46.772185 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2025-11-11 00:02:46.772195 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-11-11 00:02:46.772199 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-11-11 00:02:46.772203 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2025-11-11 00:02:46.772250 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-11-11 00:02:46.772562 | ubuntu-noble | + 2025-11-11 00:02:46.773278 | ubuntu-noble | +### Changes to issue 2025-11-11 00:02:46.773294 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2025-11-11 00:02:46.773299 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2025-11-11 00:02:46.773302 | ubuntu-noble | + 2025-11-11 00:02:46.773306 | ubuntu-noble | +## System startup scripts 2025-11-11 00:02:46.773320 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2025-11-11 00:02:46.773326 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2025-11-11 00:02:46.773401 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2025-11-11 00:02:46.773513 | ubuntu-noble | + 2025-11-11 00:02:46.773598 | ubuntu-noble | +## Library search paths 2025-11-11 00:02:46.773705 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2025-11-11 00:02:46.773837 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-11-11 00:02:46.773937 | ubuntu-noble | + 2025-11-11 00:02:46.774092 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2025-11-11 00:02:46.774209 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-11-11 00:02:46.774310 | ubuntu-noble | + 2025-11-11 00:02:46.774417 | ubuntu-noble | +## Pam configuration 2025-11-11 00:02:46.774519 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2025-11-11 00:02:46.774625 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2025-11-11 00:02:46.774794 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2025-11-11 00:02:46.774872 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2025-11-11 00:02:46.774992 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2025-11-11 00:02:46.775099 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2025-11-11 00:02:46.775204 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2025-11-11 00:02:46.775304 | ubuntu-noble | + 2025-11-11 00:02:46.775410 | ubuntu-noble | +## Mail configuration 2025-11-11 00:02:46.775513 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2025-11-11 00:02:46.775619 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2025-11-11 00:02:46.775757 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2025-11-11 00:02:46.775861 | ubuntu-noble | + 2025-11-11 00:02:46.775966 | ubuntu-noble | +## SSH configuration 2025-11-11 00:02:46.776082 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2025-11-11 00:02:46.776188 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2025-11-11 00:02:46.776287 | ubuntu-noble | + 2025-11-11 00:02:46.776393 | ubuntu-noble | +## root ssh key tampering 2025-11-11 00:02:46.776498 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2025-11-11 00:02:46.776596 | ubuntu-noble | + 2025-11-11 00:02:46.776700 | ubuntu-noble | +# Systemd 2025-11-11 00:02:46.776821 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2025-11-11 00:02:46.776926 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2025-11-11 00:02:46.777043 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2025-11-11 00:02:46.777144 | ubuntu-noble | + 2025-11-11 00:02:46.777251 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2025-11-11 00:02:46.777359 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:46.777466 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:46.777572 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-11-11 00:02:46.777673 | ubuntu-noble | + 2025-11-11 00:02:46.777817 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:46.777911 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:46.778043 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:46.778145 | ubuntu-noble | + 2025-11-11 00:02:46.778256 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-11-11 00:02:46.778364 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2025-11-11 00:02:46.778465 | ubuntu-noble | + 2025-11-11 00:02:46.778569 | ubuntu-noble | +## Critical elements access failures 2025-11-11 00:02:46.778688 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.778815 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.778929 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779050 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779162 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779271 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779382 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779496 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-11-11 00:02:46.779595 | ubuntu-noble | + 2025-11-11 00:02:46.779704 | ubuntu-noble | +## Process ID change (switching accounts) applications 2025-11-11 00:02:46.779964 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2025-11-11 00:02:46.779987 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2025-11-11 00:02:46.780049 | ubuntu-noble | + 2025-11-11 00:02:46.780154 | ubuntu-noble | +## Power state 2025-11-11 00:02:46.780258 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2025-11-11 00:02:46.780363 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2025-11-11 00:02:46.780471 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2025-11-11 00:02:46.780574 | ubuntu-noble | +-w /sbin/halt -p x -k power 2025-11-11 00:02:46.781038 | ubuntu-noble | + 2025-11-11 00:02:46.781048 | ubuntu-noble | +## Session initiation information 2025-11-11 00:02:46.781052 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2025-11-11 00:02:46.781056 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2025-11-11 00:02:46.781100 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2025-11-11 00:02:46.781198 | ubuntu-noble | + 2025-11-11 00:02:46.781304 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2025-11-11 00:02:46.781412 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.781521 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.781631 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.781752 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.781867 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.781970 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782113 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782204 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782313 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782428 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782534 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782642 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782776 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:46.782877 | ubuntu-noble | + 2025-11-11 00:02:46.782999 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2025-11-11 00:02:46.783098 | ubuntu-noble | + 2025-11-11 00:02:46.783199 | ubuntu-noble | +## Reconnaissance 2025-11-11 00:02:46.783304 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2025-11-11 00:02:46.783409 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2025-11-11 00:02:46.783513 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2025-11-11 00:02:46.783619 | ubuntu-noble | +-w /bin/uname -p x -k recon 2025-11-11 00:02:46.783755 | ubuntu-noble | +-w /etc/issue -p r -k recon 2025-11-11 00:02:46.783835 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2025-11-11 00:02:46.783938 | ubuntu-noble | + 2025-11-11 00:02:46.784052 | ubuntu-noble | +## Suspicious activity 2025-11-11 00:02:46.784157 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2025-11-11 00:02:46.784264 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2025-11-11 00:02:46.784370 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2025-11-11 00:02:46.784476 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2025-11-11 00:02:46.784582 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2025-11-11 00:02:46.784684 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2025-11-11 00:02:46.784808 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2025-11-11 00:02:46.784915 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2025-11-11 00:02:46.786734 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2025-11-11 00:02:46.786750 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2025-11-11 00:02:46.786754 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2025-11-11 00:02:46.786757 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2025-11-11 00:02:46.786761 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2025-11-11 00:02:46.786764 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2025-11-11 00:02:46.786767 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2025-11-11 00:02:46.786771 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2025-11-11 00:02:46.786774 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:46.786777 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:46.786781 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-11-11 00:02:46.786787 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:46.786791 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:46.786794 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2025-11-11 00:02:46.786797 | ubuntu-noble | + 2025-11-11 00:02:46.786801 | ubuntu-noble | +## sssd 2025-11-11 00:02:46.786805 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.786811 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.786913 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.787041 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.787157 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.787255 | ubuntu-noble | + 2025-11-11 00:02:46.787362 | ubuntu-noble | +## T1002 Data Compressed 2025-11-11 00:02:46.787462 | ubuntu-noble | + 2025-11-11 00:02:46.787566 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2025-11-11 00:02:46.787671 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-11-11 00:02:46.787789 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2025-11-11 00:02:46.787915 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-11-11 00:02:46.788011 | ubuntu-noble | + 2025-11-11 00:02:46.788120 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:46.788227 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:46.788327 | ubuntu-noble | + 2025-11-11 00:02:46.788437 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:46.788541 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:46.788640 | ubuntu-noble | + 2025-11-11 00:02:46.788757 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:46.788861 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:46.788999 | ubuntu-noble | + 2025-11-11 00:02:46.789089 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:46.789196 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:46.789352 | ubuntu-noble | + 2025-11-11 00:02:46.789462 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:46.789570 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:46.789670 | ubuntu-noble | + 2025-11-11 00:02:46.789788 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:46.789895 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:46.790003 | ubuntu-noble | + 2025-11-11 00:02:46.790112 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:46.790216 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:46.790312 | ubuntu-noble | + 2025-11-11 00:02:46.790424 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:46.790530 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:46.790637 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:46.790756 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:46.790858 | ubuntu-noble | + 2025-11-11 00:02:46.790961 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:46.791091 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:46.791189 | ubuntu-noble | + 2025-11-11 00:02:46.791293 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2025-11-11 00:02:46.791403 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2025-11-11 00:02:46.791511 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2025-11-11 00:02:46.791607 | ubuntu-noble | + 2025-11-11 00:02:46.791725 | ubuntu-noble | +## Sbin suspicious activity 2025-11-11 00:02:46.791828 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2025-11-11 00:02:46.791938 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2025-11-11 00:02:46.792049 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2025-11-11 00:02:46.792154 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-11-11 00:02:46.792261 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-11-11 00:02:46.792362 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-11-11 00:02:46.792468 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2025-11-11 00:02:46.792573 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-11-11 00:02:46.792677 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-11-11 00:02:46.792793 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-11-11 00:02:46.792890 | ubuntu-noble | + 2025-11-11 00:02:46.793000 | ubuntu-noble | +### kde4 2025-11-11 00:02:46.793119 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.793236 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:46.793334 | ubuntu-noble | + 2025-11-11 00:02:46.793438 | ubuntu-noble | +## dbus-send invocation 2025-11-11 00:02:46.793547 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2025-11-11 00:02:46.793650 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-11-11 00:02:46.793767 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-11-11 00:02:46.793865 | ubuntu-noble | + 2025-11-11 00:02:46.793969 | ubuntu-noble | +## pkexec invocation 2025-11-11 00:02:46.794094 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2025-11-11 00:02:46.794201 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2025-11-11 00:02:46.794302 | ubuntu-noble | + 2025-11-11 00:02:46.794407 | ubuntu-noble | +## Suspicious shells 2025-11-11 00:02:46.794515 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2025-11-11 00:02:46.794620 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2025-11-11 00:02:46.794733 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2025-11-11 00:02:46.794842 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2025-11-11 00:02:46.794947 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2025-11-11 00:02:46.795060 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2025-11-11 00:02:46.795162 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-11-11 00:02:46.795268 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2025-11-11 00:02:46.795370 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2025-11-11 00:02:46.795470 | ubuntu-noble | + 2025-11-11 00:02:46.795575 | ubuntu-noble | +# Web Server Actvity 2025-11-11 00:02:46.795690 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-11-11 00:02:46.795812 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-11-11 00:02:46.795912 | ubuntu-noble | + 2025-11-11 00:02:46.796027 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2025-11-11 00:02:46.796133 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2025-11-11 00:02:46.796238 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2025-11-11 00:02:46.796344 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-11-11 00:02:46.796443 | ubuntu-noble | + 2025-11-11 00:02:46.796550 | ubuntu-noble | +### https://github.com/tmux/tmux 2025-11-11 00:02:46.796655 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2025-11-11 00:02:46.796769 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-11-11 00:02:46.796867 | ubuntu-noble | + 2025-11-11 00:02:46.796984 | ubuntu-noble | +## Shell/profile configurations 2025-11-11 00:02:46.797098 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-11-11 00:02:46.797205 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2025-11-11 00:02:46.797309 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2025-11-11 00:02:46.797414 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2025-11-11 00:02:46.797520 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-11-11 00:02:46.797628 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2025-11-11 00:02:46.797742 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2025-11-11 00:02:46.797847 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2025-11-11 00:02:46.797947 | ubuntu-noble | + 2025-11-11 00:02:46.798062 | ubuntu-noble | +### https://github.com/xxh/xxh 2025-11-11 00:02:46.798167 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-11-11 00:02:46.798272 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-11-11 00:02:46.798377 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-11-11 00:02:46.798475 | ubuntu-noble | + 2025-11-11 00:02:46.798577 | ubuntu-noble | +## Injection 2025-11-11 00:02:46.798686 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2025-11-11 00:02:46.798805 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2025-11-11 00:02:46.798915 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-11-11 00:02:46.799034 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-11-11 00:02:46.799142 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-11-11 00:02:46.799253 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-11-11 00:02:46.799355 | ubuntu-noble | + 2025-11-11 00:02:46.799459 | ubuntu-noble | +## Anonymous File Creation 2025-11-11 00:02:46.799571 | ubuntu-noble | +### These rules watch the use of memfd_create 2025-11-11 00:02:46.799673 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-11-11 00:02:46.799813 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-11-11 00:02:46.799916 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-11-11 00:02:46.800032 | ubuntu-noble | + 2025-11-11 00:02:46.800137 | ubuntu-noble | +## Privilege Abuse 2025-11-11 00:02:46.800249 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-11-11 00:02:46.800361 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-11-11 00:02:46.800459 | ubuntu-noble | + 2025-11-11 00:02:46.800563 | ubuntu-noble | +# Socket Creations 2025-11-11 00:02:46.800670 | ubuntu-noble | +# will catch both IPv4 and IPv6 2025-11-11 00:02:46.800780 | ubuntu-noble | + 2025-11-11 00:02:46.800887 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:46.801002 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:46.801102 | ubuntu-noble | + 2025-11-11 00:02:46.801212 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:46.801318 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:46.801416 | ubuntu-noble | + 2025-11-11 00:02:46.801522 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2025-11-11 00:02:46.801620 | ubuntu-noble | + 2025-11-11 00:02:46.801747 | ubuntu-noble | +# RPM (Redhat/CentOS) 2025-11-11 00:02:46.801855 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2025-11-11 00:02:46.801959 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2025-11-11 00:02:46.802067 | ubuntu-noble | + 2025-11-11 00:02:46.802172 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-11-11 00:02:46.802279 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2025-11-11 00:02:46.802379 | ubuntu-noble | + 2025-11-11 00:02:46.802729 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2025-11-11 00:02:46.802739 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2025-11-11 00:02:46.802743 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2025-11-11 00:02:46.802805 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2025-11-11 00:02:46.802911 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2025-11-11 00:02:46.803039 | ubuntu-noble | + 2025-11-11 00:02:46.803149 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2025-11-11 00:02:46.803253 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-11-11 00:02:46.803358 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2025-11-11 00:02:46.803465 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-11-11 00:02:46.803572 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-11-11 00:02:46.803676 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-11-11 00:02:46.803792 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2025-11-11 00:02:46.803898 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2025-11-11 00:02:46.804006 | ubuntu-noble | + 2025-11-11 00:02:46.804111 | ubuntu-noble | +# PIP(3) (Python installs) 2025-11-11 00:02:46.804219 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804326 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804433 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804543 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804651 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804774 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:46.804872 | ubuntu-noble | + 2025-11-11 00:02:46.806101 | ubuntu-noble | +# npm 2025-11-11 00:02:46.806118 | ubuntu-noble | +## T1072 third party software 2025-11-11 00:02:46.806122 | ubuntu-noble | +## https://www.npmjs.com 2025-11-11 00:02:46.806126 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-11-11 00:02:46.806129 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-11-11 00:02:46.806133 | ubuntu-noble | + 2025-11-11 00:02:46.806136 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-11-11 00:02:46.806140 | ubuntu-noble | +## T1072 third party software 2025-11-11 00:02:46.806143 | ubuntu-noble | +## https://www.cpan.org 2025-11-11 00:02:46.806147 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-11-11 00:02:46.806150 | ubuntu-noble | + 2025-11-11 00:02:46.806153 | ubuntu-noble | +# Ruby (RubyGems installs) 2025-11-11 00:02:46.806207 | ubuntu-noble | +## T1072 third party software 2025-11-11 00:02:46.806313 | ubuntu-noble | +## https://rubygems.org 2025-11-11 00:02:46.806420 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-11-11 00:02:46.806519 | ubuntu-noble | + 2025-11-11 00:02:46.806624 | ubuntu-noble | +# LuaRocks (Lua installs) 2025-11-11 00:02:46.806739 | ubuntu-noble | +## T1072 third party software 2025-11-11 00:02:46.806843 | ubuntu-noble | +## https://luarocks.org 2025-11-11 00:02:46.806950 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-11-11 00:02:46.807057 | ubuntu-noble | + 2025-11-11 00:02:46.807171 | ubuntu-noble | +# Pacman (Arch Linux) 2025-11-11 00:02:46.807273 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2025-11-11 00:02:46.807377 | ubuntu-noble | +## T1072 third party software 2025-11-11 00:02:46.807486 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-11-11 00:02:46.807594 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-11-11 00:02:46.807694 | ubuntu-noble | + 2025-11-11 00:02:46.807809 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2025-11-11 00:02:46.807908 | ubuntu-noble | + 2025-11-11 00:02:46.808031 | ubuntu-noble | +## GDS specific secrets 2025-11-11 00:02:46.808136 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-11-11 00:02:46.808234 | ubuntu-noble | + 2025-11-11 00:02:46.808338 | ubuntu-noble | +## IBM Bigfix BESClient 2025-11-11 00:02:46.808454 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-11-11 00:02:46.808564 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-11-11 00:02:46.808664 | ubuntu-noble | + 2025-11-11 00:02:46.808779 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2025-11-11 00:02:46.808883 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2025-11-11 00:02:46.809002 | ubuntu-noble | + 2025-11-11 00:02:46.809088 | ubuntu-noble | +## Salt 2025-11-11 00:02:46.809192 | ubuntu-noble | +## https://saltproject.io/ 2025-11-11 00:02:46.809300 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-11-11 00:02:46.809406 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2025-11-11 00:02:46.809511 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-11-11 00:02:46.809609 | ubuntu-noble | + 2025-11-11 00:02:46.809721 | ubuntu-noble | +## Otter 2025-11-11 00:02:46.809827 | ubuntu-noble | +## https://inedo.com/otter 2025-11-11 00:02:46.809933 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2025-11-11 00:02:46.810040 | ubuntu-noble | + 2025-11-11 00:02:46.810150 | ubuntu-noble | +## T1081 Credentials In Files 2025-11-11 00:02:46.810253 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2025-11-11 00:02:46.810361 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2025-11-11 00:02:46.810465 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2025-11-11 00:02:46.810570 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.810675 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2025-11-11 00:02:46.810799 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2025-11-11 00:02:46.810906 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2025-11-11 00:02:46.811025 | ubuntu-noble | + 2025-11-11 00:02:46.811133 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2025-11-11 00:02:46.811239 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2025-11-11 00:02:46.811341 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.811449 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2025-11-11 00:02:46.811548 | ubuntu-noble | + 2025-11-11 00:02:46.811655 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2025-11-11 00:02:46.812576 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2025-11-11 00:02:46.812592 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.812596 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2025-11-11 00:02:46.812599 | ubuntu-noble | + 2025-11-11 00:02:46.812603 | ubuntu-noble | +### https://github.com/awgn/cgrep 2025-11-11 00:02:46.812606 | ubuntu-noble | + 2025-11-11 00:02:46.812609 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2025-11-11 00:02:46.812613 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.812616 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2025-11-11 00:02:46.812665 | ubuntu-noble | + 2025-11-11 00:02:46.812782 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2025-11-11 00:02:46.812889 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2025-11-11 00:02:46.813006 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.813106 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2025-11-11 00:02:46.813205 | ubuntu-noble | + 2025-11-11 00:02:46.813309 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2025-11-11 00:02:46.813414 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2025-11-11 00:02:46.813516 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.813629 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2025-11-11 00:02:46.813730 | ubuntu-noble | + 2025-11-11 00:02:46.813841 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2025-11-11 00:02:46.813947 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2025-11-11 00:02:46.814056 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.814163 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2025-11-11 00:02:46.814260 | ubuntu-noble | + 2025-11-11 00:02:46.814368 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2025-11-11 00:02:46.814474 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2025-11-11 00:02:46.814575 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.814681 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2025-11-11 00:02:46.814791 | ubuntu-noble | + 2025-11-11 00:02:46.814898 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2025-11-11 00:02:46.815021 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2025-11-11 00:02:46.815124 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.815230 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2025-11-11 00:02:46.815329 | ubuntu-noble | + 2025-11-11 00:02:46.815435 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2025-11-11 00:02:46.815541 | ubuntu-noble | +### https://beyondgrep.com 2025-11-11 00:02:46.815647 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2025-11-11 00:02:46.815763 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2025-11-11 00:02:46.815871 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2025-11-11 00:02:46.815970 | ubuntu-noble | +### macOS 2025-11-11 00:02:46.816084 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2025-11-11 00:02:46.816182 | ubuntu-noble | + 2025-11-11 00:02:46.816285 | ubuntu-noble | +## Docker 2025-11-11 00:02:46.816389 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2025-11-11 00:02:46.816491 | ubuntu-noble | +-w /usr/bin/docker -k docker 2025-11-11 00:02:46.816595 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2025-11-11 00:02:46.816697 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2025-11-11 00:02:46.816811 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2025-11-11 00:02:46.816914 | ubuntu-noble | +-w /etc/docker -k docker 2025-11-11 00:02:46.817029 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2025-11-11 00:02:46.817135 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2025-11-11 00:02:46.817247 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2025-11-11 00:02:46.817353 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-11-11 00:02:46.817452 | ubuntu-noble | + 2025-11-11 00:02:46.817558 | ubuntu-noble | +## Virtualization stuff 2025-11-11 00:02:46.817663 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-11-11 00:02:46.817779 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-11-11 00:02:46.817882 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-11-11 00:02:46.818044 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2025-11-11 00:02:46.818149 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-11-11 00:02:46.818253 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-11-11 00:02:46.818357 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-11-11 00:02:46.818457 | ubuntu-noble | + 2025-11-11 00:02:46.818562 | ubuntu-noble | +#### VirtualBox on macOS 2025-11-11 00:02:46.818659 | ubuntu-noble | + 2025-11-11 00:02:46.818778 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-11-11 00:02:46.818883 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-11-11 00:02:46.819020 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-11-11 00:02:46.819114 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-11-11 00:02:46.819219 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-11-11 00:02:46.819327 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-11-11 00:02:46.819431 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-11-11 00:02:46.819537 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-11-11 00:02:46.819641 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-11-11 00:02:46.819758 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-11-11 00:02:46.819860 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-11-11 00:02:46.819971 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-11-11 00:02:46.820093 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-11-11 00:02:46.820198 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-11-11 00:02:46.820308 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-11-11 00:02:46.820416 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-11-11 00:02:46.820525 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-11-11 00:02:46.820626 | ubuntu-noble | + 2025-11-11 00:02:46.820743 | ubuntu-noble | +### Parallels Desktop on macOS 2025-11-11 00:02:46.820842 | ubuntu-noble | + 2025-11-11 00:02:46.820949 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-11-11 00:02:46.821071 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-11-11 00:02:46.821178 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-11-11 00:02:46.821284 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-11-11 00:02:46.821388 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-11-11 00:02:46.821497 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-11-11 00:02:46.821603 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-11-11 00:02:46.821725 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-11-11 00:02:46.821823 | ubuntu-noble | + 2025-11-11 00:02:46.821930 | ubuntu-noble | +### qemu on macOS 2025-11-11 00:02:46.822036 | ubuntu-noble | + 2025-11-11 00:02:46.822140 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-11-11 00:02:46.822249 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-11-11 00:02:46.822353 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-11-11 00:02:46.822459 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-11-11 00:02:46.822566 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-11-11 00:02:46.822667 | ubuntu-noble | + 2025-11-11 00:02:46.822781 | ubuntu-noble | +## Kubelet 2025-11-11 00:02:46.783852 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.005016", "end": "2025-11-11 00:02:46.740249", "msg": "", "rc": 0, "start": "2025-11-11 00:02:46.735233", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2025-11-11 00:02:46.783900 | ubuntu-jammy | 2025-11-11 00:02:46.783907 | ubuntu-jammy | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-11-11 00:02:47.200780 | debian-bookworm | --- before 2025-11-11 00:02:47.200877 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2091ffrdsnub/tmpmfwddpd7/auditd.conf.j2 2025-11-11 00:02:47.200885 | debian-bookworm | @@ -0,0 +1,37 @@ 2025-11-11 00:02:47.200898 | debian-bookworm | +# 2025-11-11 00:02:47.200903 | debian-bookworm | +# This file controls the configuration of the audit daemon 2025-11-11 00:02:47.200966 | debian-bookworm | +# 2025-11-11 00:02:47.201163 | debian-bookworm | + 2025-11-11 00:02:47.201267 | debian-bookworm | +local_events = yes 2025-11-11 00:02:47.201374 | debian-bookworm | +write_logs = yes 2025-11-11 00:02:47.201485 | debian-bookworm | +log_file = /var/log/audit/audit.log 2025-11-11 00:02:47.201607 | debian-bookworm | +log_group = adm 2025-11-11 00:02:47.201712 | debian-bookworm | +log_format = RAW 2025-11-11 00:02:47.201817 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2025-11-11 00:02:47.201950 | debian-bookworm | +freq = 50 2025-11-11 00:02:47.202064 | debian-bookworm | +max_log_file = 8 2025-11-11 00:02:47.202171 | debian-bookworm | +num_logs = 5 2025-11-11 00:02:47.202283 | debian-bookworm | +priority_boost = 4 2025-11-11 00:02:47.202390 | debian-bookworm | +disp_qos = lossy 2025-11-11 00:02:47.202498 | debian-bookworm | +dispatcher = /sbin/audispd 2025-11-11 00:02:47.202645 | debian-bookworm | +name_format = NONE 2025-11-11 00:02:47.202753 | debian-bookworm | +##name = mydomain 2025-11-11 00:02:47.202857 | debian-bookworm | +max_log_file_action = ROTATE 2025-11-11 00:02:47.202967 | debian-bookworm | +space_left = 12361 2025-11-11 00:02:47.203069 | debian-bookworm | +space_left_action = email 2025-11-11 00:02:47.203191 | debian-bookworm | +verify_email = yes 2025-11-11 00:02:47.203294 | debian-bookworm | +action_mail_acct = root 2025-11-11 00:02:47.203410 | debian-bookworm | +admin_space_left = 50 2025-11-11 00:02:47.203593 | debian-bookworm | +admin_space_left_action = SUSPEND 2025-11-11 00:02:47.203748 | debian-bookworm | +disk_full_action = SUSPEND 2025-11-11 00:02:47.203904 | debian-bookworm | +disk_error_action = SUSPEND 2025-11-11 00:02:47.204061 | debian-bookworm | +use_libwrap = yes 2025-11-11 00:02:47.204226 | debian-bookworm | +##tcp_listen_port = 60 2025-11-11 00:02:47.204380 | debian-bookworm | +tcp_listen_queue = 5 2025-11-11 00:02:47.204494 | debian-bookworm | +tcp_max_per_addr = 1 2025-11-11 00:02:47.204636 | debian-bookworm | +##tcp_client_ports = 1024-65535 2025-11-11 00:02:47.204741 | debian-bookworm | +tcp_client_max_idle = 0 2025-11-11 00:02:47.204843 | debian-bookworm | +enable_krb5 = no 2025-11-11 00:02:47.204948 | debian-bookworm | +krb5_principal = auditd 2025-11-11 00:02:47.205084 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2025-11-11 00:02:47.205192 | debian-bookworm | +distribute_network = no 2025-11-11 00:02:47.205299 | debian-bookworm | 2025-11-11 00:02:47.205713 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819365.462398-2463-210458417895330/.source.conf", "state": "file", "uid": 0} 2025-11-11 00:02:47.205779 | debian-bookworm | 2025-11-11 00:02:47.205894 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-11-11 00:02:46.823000 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2025-11-11 00:02:46.823007 | ubuntu-noble | + 2025-11-11 00:02:46.823309 | ubuntu-noble | +# ipc system call 2025-11-11 00:02:46.823316 | ubuntu-noble | +# /usr/include/linux/ipc.h 2025-11-11 00:02:46.823320 | ubuntu-noble | + 2025-11-11 00:02:46.823409 | ubuntu-noble | +## msgctl 2025-11-11 00:02:46.823523 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-11-11 00:02:46.823620 | ubuntu-noble | +## msgget 2025-11-11 00:02:46.823739 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-11-11 00:02:46.823845 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:46.823957 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-11-11 00:02:46.824082 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-11-11 00:02:46.824178 | ubuntu-noble | + 2025-11-11 00:02:46.824281 | ubuntu-noble | +## semctl 2025-11-11 00:02:46.824390 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-11-11 00:02:46.824490 | ubuntu-noble | +## semget 2025-11-11 00:02:46.824603 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-11-11 00:02:46.826732 | ubuntu-noble | +## semop 2025-11-11 00:02:46.826747 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-11-11 00:02:46.826751 | ubuntu-noble | +## semtimedop 2025-11-11 00:02:46.826754 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-11-11 00:02:46.826758 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:46.826767 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-11-11 00:02:46.826770 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-11-11 00:02:46.826774 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-11-11 00:02:46.826777 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-11-11 00:02:46.826780 | ubuntu-noble | + 2025-11-11 00:02:46.826784 | ubuntu-noble | +## shmctl 2025-11-11 00:02:46.826788 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-11-11 00:02:46.826791 | ubuntu-noble | +## shmget 2025-11-11 00:02:46.826794 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-11-11 00:02:46.826798 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:46.826801 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-11-11 00:02:46.826805 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-11-11 00:02:46.826808 | ubuntu-noble | + 2025-11-11 00:02:46.826811 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2025-11-11 00:02:46.826817 | ubuntu-noble | + 2025-11-11 00:02:46.826847 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2025-11-11 00:02:46.826940 | ubuntu-noble | + 2025-11-11 00:02:46.827051 | ubuntu-noble | +## Common Shells 2025-11-11 00:02:46.827158 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2025-11-11 00:02:46.827264 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2025-11-11 00:02:46.827370 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2025-11-11 00:02:46.827473 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2025-11-11 00:02:46.827576 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2025-11-11 00:02:46.827679 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2025-11-11 00:02:46.827791 | ubuntu-noble | + 2025-11-11 00:02:46.827904 | ubuntu-noble | +## Root command executions 2025-11-11 00:02:46.828019 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-11-11 00:02:46.828123 | ubuntu-noble | + 2025-11-11 00:02:46.828229 | ubuntu-noble | +## File Deletion Events by User 2025-11-11 00:02:46.828341 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-11-11 00:02:46.828440 | ubuntu-noble | + 2025-11-11 00:02:46.828542 | ubuntu-noble | +## File Access 2025-11-11 00:02:46.828648 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2025-11-11 00:02:46.828776 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:46.828893 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:46.829012 | ubuntu-noble | + 2025-11-11 00:02:46.829103 | ubuntu-noble | +### Unsuccessful Creation 2025-11-11 00:02:46.829217 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-11-11 00:02:46.829329 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-11-11 00:02:46.829430 | ubuntu-noble | + 2025-11-11 00:02:46.829532 | ubuntu-noble | +### Unsuccessful Modification 2025-11-11 00:02:46.829646 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-11-11 00:02:46.829773 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-11-11 00:02:46.829873 | ubuntu-noble | + 2025-11-11 00:02:46.829996 | ubuntu-noble | +## 32bit API Exploitation 2025-11-11 00:02:46.830117 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2025-11-11 00:02:46.830218 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-11-11 00:02:46.830325 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2025-11-11 00:02:46.830426 | ubuntu-noble | +### bit API. 2025-11-11 00:02:46.830535 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-11-11 00:02:46.830634 | ubuntu-noble | + 2025-11-11 00:02:46.830753 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2025-11-11 00:02:46.830852 | ubuntu-noble | + 2025-11-11 00:02:46.830955 | ubuntu-noble | +##-e 2 2025-11-11 00:02:46.831063 | ubuntu-noble | 2025-11-11 00:02:46.831292 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819365.7200222-2396-52841345126765/.source.rules", "state": "file", "uid": 0} 2025-11-11 00:02:46.831392 | ubuntu-noble | 2025-11-11 00:02:46.831502 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2025-11-11 00:02:47.134470 | ubuntu-jammy | --- before 2025-11-11 00:02:47.134520 | ubuntu-jammy | +++ after 2025-11-11 00:02:47.134527 | ubuntu-jammy | @@ -1,4 +1,4 @@ 2025-11-11 00:02:47.134533 | ubuntu-jammy | { 2025-11-11 00:02:47.134538 | ubuntu-jammy | "path": "/etc/audit/rules.d/audit.rules", 2025-11-11 00:02:47.134543 | ubuntu-jammy | - "state": "file" 2025-11-11 00:02:47.134549 | ubuntu-jammy | + "state": "absent" 2025-11-11 00:02:47.134553 | ubuntu-jammy | } 2025-11-11 00:02:47.134558 | ubuntu-jammy | 2025-11-11 00:02:47.134564 | ubuntu-jammy | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-11-11 00:02:47.134570 | ubuntu-jammy | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-11-11 00:02:47.134575 | ubuntu-jammy | 2025-11-11 00:02:47.134580 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:47.052352 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "name": null, "status": {}} 2025-11-11 00:02:47.052480 | centos-9-stream | 2025-11-11 00:02:47.052653 | centos-9-stream | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-11-11 00:02:47.618553 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:40 UTC", "ActiveEnterTimestampMonotonic": "262572427", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:39 UTC", "AssertTimestampMonotonic": "262516107", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "38849000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ConditionTimestampMonotonic": "262515996", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2165", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:40 UTC", "ExecMainStartTimestampMonotonic": "262546569", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2164 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2164 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:40 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2169 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:40 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2169 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:39 UTC", "InactiveExitTimestampMonotonic": "262522542", "InvocationID": "d4c5a2db73a946fbb08755b54c8d62c6", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15379", "LimitNPROCSoft": "15379", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15379", "LimitSIGPENDINGSoft": "15379", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2165", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3502219264", "MemoryCurrent": "495616", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2355200", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-11-11 00:02:40 UTC", "StateChangeTimestampMonotonic": "262572427", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4613", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:47.623945 | ubuntu-noble | 2025-11-11 00:02:47.624075 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2025-11-11 00:02:47.767157 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ActiveEnterTimestampMonotonic": "283169826", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:39 UTC", "AssertTimestampMonotonic": "283139146", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "34328000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ConditionTimestampMonotonic": "283139109", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1678", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ExecMainStartTimestampMonotonic": "283151042", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1677 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1677 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1681 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:39 UTC] ; pid=1681 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:39 UTC", "InactiveExitTimestampMonotonic": "283140283", "InvocationID": "9555246b5ee6476d9c31cada86905e70", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15329", "LimitNPROCSoft": "15329", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15329", "LimitSIGPENDINGSoft": "15329", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1678", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:39 UTC", "StateChangeTimestampMonotonic": "283169826", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4598", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:47.770208 | ubuntu-jammy | 2025-11-11 00:02:47.770226 | ubuntu-jammy | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-11-11 00:02:47.868338 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-11-11 00:02:47.868408 | debian-bookworm | 2025-11-11 00:02:47.868437 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2025-11-11 00:02:48.143157 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.003882", "end": "2025-11-11 00:02:48.095992", "msg": "", "rc": 0, "start": "2025-11-11 00:02:48.092110", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-11-11 00:02:48.143348 | ubuntu-noble | 2025-11-11 00:02:48.143496 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-11-11 00:02:48.203061 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.108052", "end": "2025-11-11 00:02:48.163301", "msg": "", "rc": 0, "start": "2025-11-11 00:02:48.055249", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2065\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 448\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2065\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 2\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2065", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 448", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2065", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 2", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-11-11 00:02:48.203133 | ubuntu-jammy | 2025-11-11 00:02:48.203141 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:48.542410 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-11-11 00:02:48.542599 | ubuntu-noble | --- before 2025-11-11 00:02:48.542749 | ubuntu-noble | +++ after 2025-11-11 00:02:48.542878 | ubuntu-noble | @@ -1,4 +1,4 @@ 2025-11-11 00:02:48.543011 | ubuntu-noble | { 2025-11-11 00:02:48.543139 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2025-11-11 00:02:48.543259 | ubuntu-noble | - "state": "file" 2025-11-11 00:02:48.543375 | ubuntu-noble | + "state": "absent" 2025-11-11 00:02:48.543490 | ubuntu-noble | } 2025-11-11 00:02:48.543604 | ubuntu-noble | 2025-11-11 00:02:48.543764 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-11-11 00:02:48.543894 | ubuntu-noble | 2025-11-11 00:02:48.544032 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:49.054983 | debian-bookworm | --- before 2025-11-11 00:02:49.055129 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2091ffrdsnub/tmp7i_lb5r9/20-neo23x0.rules.j2 2025-11-11 00:02:49.055369 | debian-bookworm | @@ -0,0 +1,750 @@ 2025-11-11 00:02:49.055660 | debian-bookworm | +# ___ ___ __ __ 2025-11-11 00:02:49.055917 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2025-11-11 00:02:49.056183 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2025-11-11 00:02:49.056436 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-11-11 00:02:49.056786 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-11-11 00:02:49.057095 | debian-bookworm | +# 2025-11-11 00:02:49.057331 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2025-11-11 00:02:49.057571 | debian-bookworm | +# /etc/audit/audit.rules 2025-11-11 00:02:49.057783 | debian-bookworm | +# 2025-11-11 00:02:49.058005 | debian-bookworm | +# Compiled by Florian Roth 2025-11-11 00:02:49.058210 | debian-bookworm | +# 2025-11-11 00:02:49.058434 | debian-bookworm | +# Created : 2017/12/05 2025-11-11 00:02:49.058672 | debian-bookworm | +# Modified : 2023/01/25 2025-11-11 00:02:49.058872 | debian-bookworm | +# 2025-11-11 00:02:49.059091 | debian-bookworm | +# Based on rules published here: 2025-11-11 00:02:49.059308 | debian-bookworm | +# Gov.uk auditd rules 2025-11-11 00:02:49.061057 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-11-11 00:02:49.061105 | debian-bookworm | +# CentOS 7 hardening 2025-11-11 00:02:49.061117 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-11-11 00:02:49.061125 | debian-bookworm | +# Linux audit repo 2025-11-11 00:02:49.061138 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-11-11 00:02:49.069057 | debian-bookworm | +# Auditd high performance linux auditing 2025-11-11 00:02:49.069105 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-11-11 00:02:49.069112 | debian-bookworm | +# 2025-11-11 00:02:49.069130 | debian-bookworm | +# Further rules 2025-11-11 00:02:49.069136 | debian-bookworm | +# For PCI DSS compliance see: 2025-11-11 00:02:49.069141 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-11-11 00:02:49.069147 | debian-bookworm | +# For NISPOM compliance see: 2025-11-11 00:02:49.069152 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-11-11 00:02:49.069157 | debian-bookworm | + 2025-11-11 00:02:49.069162 | debian-bookworm | +# Remove any existing rules 2025-11-11 00:02:49.069167 | debian-bookworm | +-D 2025-11-11 00:02:49.069172 | debian-bookworm | + 2025-11-11 00:02:49.069177 | debian-bookworm | +# Buffer Size 2025-11-11 00:02:49.069182 | debian-bookworm | +## Feel free to increase this if the machine panic's 2025-11-11 00:02:49.069187 | debian-bookworm | +-b 8192 2025-11-11 00:02:49.069191 | debian-bookworm | + 2025-11-11 00:02:49.069196 | debian-bookworm | +# Failure Mode 2025-11-11 00:02:49.069201 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-11-11 00:02:49.069206 | debian-bookworm | +-f 1 2025-11-11 00:02:49.069210 | debian-bookworm | + 2025-11-11 00:02:49.069215 | debian-bookworm | +# Ignore errors 2025-11-11 00:02:49.069220 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2025-11-11 00:02:49.069224 | debian-bookworm | +-i 2025-11-11 00:02:49.069229 | debian-bookworm | + 2025-11-11 00:02:49.069233 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2025-11-11 00:02:49.069238 | debian-bookworm | + 2025-11-11 00:02:49.069243 | debian-bookworm | +## Audit the audit logs 2025-11-11 00:02:49.069247 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2025-11-11 00:02:49.069252 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2025-11-11 00:02:49.069257 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2025-11-11 00:02:49.069261 | debian-bookworm | + 2025-11-11 00:02:49.069266 | debian-bookworm | +## Auditd configuration 2025-11-11 00:02:49.069270 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-11-11 00:02:49.069275 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2025-11-11 00:02:49.069279 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-11-11 00:02:49.069284 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2025-11-11 00:02:49.069289 | debian-bookworm | + 2025-11-11 00:02:49.069293 | debian-bookworm | +## Monitor for use of audit management tools 2025-11-11 00:02:49.069298 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2025-11-11 00:02:49.069309 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2025-11-11 00:02:49.069314 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2025-11-11 00:02:49.069450 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2025-11-11 00:02:49.069621 | debian-bookworm | + 2025-11-11 00:02:49.069770 | debian-bookworm | +## Access to all audit trails 2025-11-11 00:02:49.069912 | debian-bookworm | + 2025-11-11 00:02:49.070073 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-11-11 00:02:49.070220 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-11-11 00:02:49.070381 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-11-11 00:02:49.070581 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-11-11 00:02:49.070710 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-11-11 00:02:49.070853 | debian-bookworm | + 2025-11-11 00:02:49.071005 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2025-11-11 00:02:49.071151 | debian-bookworm | + 2025-11-11 00:02:49.071304 | debian-bookworm | +### We put these early because audit is a first match wins system. 2025-11-11 00:02:49.071475 | debian-bookworm | + 2025-11-11 00:02:49.071653 | debian-bookworm | +## Ignore SELinux AVC records 2025-11-11 00:02:49.071802 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2025-11-11 00:02:49.071952 | debian-bookworm | + 2025-11-11 00:02:49.072107 | debian-bookworm | +## Ignore current working directory records 2025-11-11 00:02:49.072262 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2025-11-11 00:02:49.072428 | debian-bookworm | + 2025-11-11 00:02:49.072635 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-11-11 00:02:49.072786 | debian-bookworm | +-a never,user -F subj_type=crond_t 2025-11-11 00:02:49.072916 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2025-11-11 00:02:49.073101 | debian-bookworm | + 2025-11-11 00:02:49.073242 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2025-11-11 00:02:49.073406 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-11-11 00:02:49.073579 | debian-bookworm | + 2025-11-11 00:02:49.073723 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-11-11 00:02:49.073863 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-11-11 00:02:49.073996 | debian-bookworm | + 2025-11-11 00:02:49.074128 | debian-bookworm | +## Open VM Tools 2025-11-11 00:02:49.074265 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-11-11 00:02:49.074400 | debian-bookworm | + 2025-11-11 00:02:49.074621 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2025-11-11 00:02:49.074730 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-11-11 00:02:49.074865 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-11-11 00:02:49.074993 | debian-bookworm | + 2025-11-11 00:02:49.075125 | debian-bookworm | +## FileBeat 2025-11-11 00:02:49.075252 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-11-11 00:02:49.075379 | debian-bookworm | + 2025-11-11 00:02:49.075506 | debian-bookworm | +## More information on how to filter events 2025-11-11 00:02:49.075648 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2025-11-11 00:02:49.075768 | debian-bookworm | + 2025-11-11 00:02:49.075891 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2025-11-11 00:02:49.076015 | debian-bookworm | + 2025-11-11 00:02:49.076136 | debian-bookworm | +## Kernel parameters 2025-11-11 00:02:49.076259 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2025-11-11 00:02:49.076386 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2025-11-11 00:02:49.076509 | debian-bookworm | + 2025-11-11 00:02:49.076667 | debian-bookworm | +## Kernel module loading and unloading 2025-11-11 00:02:49.076796 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-11-11 00:02:49.076923 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-11-11 00:02:49.077082 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-11-11 00:02:49.077218 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-11-11 00:02:49.077335 | debian-bookworm | + 2025-11-11 00:02:49.077451 | debian-bookworm | +## Modprobe configuration 2025-11-11 00:02:49.077670 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2025-11-11 00:02:49.077786 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2025-11-11 00:02:49.077899 | debian-bookworm | + 2025-11-11 00:02:49.078013 | debian-bookworm | +## KExec usage (all actions) 2025-11-11 00:02:49.078129 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-11-11 00:02:49.078240 | debian-bookworm | + 2025-11-11 00:02:49.078355 | debian-bookworm | +## Special files 2025-11-11 00:02:49.078493 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-11-11 00:02:49.078622 | debian-bookworm | + 2025-11-11 00:02:49.078733 | debian-bookworm | +## Mount operations (only attributable) 2025-11-11 00:02:49.078855 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-11-11 00:02:49.078971 | debian-bookworm | + 2025-11-11 00:02:49.079099 | debian-bookworm | +### NFS mount 2025-11-11 00:02:49.079247 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.079375 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.079480 | debian-bookworm | + 2025-11-11 00:02:49.079634 | debian-bookworm | +## Change swap (only attributable) 2025-11-11 00:02:49.079751 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-11-11 00:02:49.079861 | debian-bookworm | + 2025-11-11 00:02:49.079974 | debian-bookworm | +## Time 2025-11-11 00:02:49.080097 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-11-11 00:02:49.080213 | debian-bookworm | +### Local time zone 2025-11-11 00:02:49.080318 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2025-11-11 00:02:49.080420 | debian-bookworm | + 2025-11-11 00:02:49.080538 | debian-bookworm | +## Stunnel 2025-11-11 00:02:49.080639 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2025-11-11 00:02:49.080748 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2025-11-11 00:02:49.080850 | debian-bookworm | + 2025-11-11 00:02:49.080957 | debian-bookworm | +## Cron configuration & scheduled jobs 2025-11-11 00:02:49.081089 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2025-11-11 00:02:49.081195 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2025-11-11 00:02:49.081296 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2025-11-11 00:02:49.081405 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2025-11-11 00:02:49.081509 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2025-11-11 00:02:49.081626 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2025-11-11 00:02:49.081732 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2025-11-11 00:02:49.081835 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2025-11-11 00:02:49.081940 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2025-11-11 00:02:49.082045 | debian-bookworm | + 2025-11-11 00:02:49.082154 | debian-bookworm | +## User, group, password databases 2025-11-11 00:02:49.082260 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2025-11-11 00:02:49.082363 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2025-11-11 00:02:49.082465 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2025-11-11 00:02:49.082605 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2025-11-11 00:02:49.082713 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2025-11-11 00:02:49.082815 | debian-bookworm | + 2025-11-11 00:02:49.082922 | debian-bookworm | +## Sudoers file changes 2025-11-11 00:02:49.083030 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2025-11-11 00:02:49.083131 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2025-11-11 00:02:49.083231 | debian-bookworm | + 2025-11-11 00:02:49.083361 | debian-bookworm | +## Passwd 2025-11-11 00:02:49.083439 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2025-11-11 00:02:49.083573 | debian-bookworm | + 2025-11-11 00:02:49.083684 | debian-bookworm | +## Tools to change group identifiers 2025-11-11 00:02:49.083828 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2025-11-11 00:02:49.083987 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2025-11-11 00:02:49.084135 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2025-11-11 00:02:49.084267 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2025-11-11 00:02:49.084385 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2025-11-11 00:02:49.084509 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2025-11-11 00:02:49.084661 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2025-11-11 00:02:49.084767 | debian-bookworm | + 2025-11-11 00:02:49.084870 | debian-bookworm | +## Login configuration and information 2025-11-11 00:02:49.085003 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2025-11-11 00:02:49.085101 | debian-bookworm | +-w /etc/securetty -p wa -k login 2025-11-11 00:02:49.085213 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2025-11-11 00:02:49.085339 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2025-11-11 00:02:49.085479 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2025-11-11 00:02:49.085612 | debian-bookworm | + 2025-11-11 00:02:49.085721 | debian-bookworm | +## Network Environment 2025-11-11 00:02:49.085827 | debian-bookworm | +### Changes to hostname 2025-11-11 00:02:49.085942 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-11-11 00:02:49.086048 | debian-bookworm | + 2025-11-11 00:02:49.086155 | debian-bookworm | +### Detect Remote Shell Use 2025-11-11 00:02:49.086286 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:49.086431 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:49.086555 | debian-bookworm | + 2025-11-11 00:02:49.086694 | debian-bookworm | +### Successful IPv4 Connections 2025-11-11 00:02:49.086768 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-11-11 00:02:49.086863 | debian-bookworm | + 2025-11-11 00:02:49.086966 | debian-bookworm | +### Successful IPv6 Connections 2025-11-11 00:02:49.087073 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-11-11 00:02:49.087180 | debian-bookworm | + 2025-11-11 00:02:49.087282 | debian-bookworm | +### Changes to other files 2025-11-11 00:02:49.087408 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2025-11-11 00:02:49.087520 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-11-11 00:02:49.087666 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-11-11 00:02:49.087780 | debian-bookworm | +-w /etc/network/ -p wa -k network 2025-11-11 00:02:49.087877 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-11-11 00:02:49.087977 | debian-bookworm | + 2025-11-11 00:02:49.088104 | debian-bookworm | +### Changes to issue 2025-11-11 00:02:49.088249 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2025-11-11 00:02:49.088391 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2025-11-11 00:02:49.088555 | debian-bookworm | + 2025-11-11 00:02:49.088699 | debian-bookworm | +## System startup scripts 2025-11-11 00:02:49.088808 | debian-bookworm | +-w /etc/inittab -p wa -k init 2025-11-11 00:02:49.088915 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2025-11-11 00:02:49.089055 | debian-bookworm | +-w /etc/init/ -p wa -k init 2025-11-11 00:02:49.089158 | debian-bookworm | + 2025-11-11 00:02:49.089265 | debian-bookworm | +## Library search paths 2025-11-11 00:02:49.089378 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2025-11-11 00:02:49.089521 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-11-11 00:02:49.089671 | debian-bookworm | + 2025-11-11 00:02:49.089784 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2025-11-11 00:02:49.089896 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-11-11 00:02:49.089999 | debian-bookworm | + 2025-11-11 00:02:49.090102 | debian-bookworm | +## Pam configuration 2025-11-11 00:02:49.090206 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2025-11-11 00:02:49.090310 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2025-11-11 00:02:49.090436 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2025-11-11 00:02:49.090561 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2025-11-11 00:02:49.090669 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2025-11-11 00:02:49.090775 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2025-11-11 00:02:49.090879 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2025-11-11 00:02:49.090993 | debian-bookworm | + 2025-11-11 00:02:49.091149 | debian-bookworm | +## Mail configuration 2025-11-11 00:02:49.091258 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2025-11-11 00:02:49.091374 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2025-11-11 00:02:49.091501 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2025-11-11 00:02:49.091626 | debian-bookworm | + 2025-11-11 00:02:49.091732 | debian-bookworm | +## SSH configuration 2025-11-11 00:02:49.091839 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2025-11-11 00:02:49.091940 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2025-11-11 00:02:49.092042 | debian-bookworm | + 2025-11-11 00:02:49.092153 | debian-bookworm | +## root ssh key tampering 2025-11-11 00:02:49.092251 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2025-11-11 00:02:49.092352 | debian-bookworm | + 2025-11-11 00:02:49.092478 | debian-bookworm | +# Systemd 2025-11-11 00:02:49.092599 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2025-11-11 00:02:49.092708 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2025-11-11 00:02:49.092812 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2025-11-11 00:02:49.092914 | debian-bookworm | + 2025-11-11 00:02:49.093041 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2025-11-11 00:02:49.093150 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:49.093260 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:49.093365 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-11-11 00:02:49.093493 | debian-bookworm | + 2025-11-11 00:02:49.093644 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:49.093752 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:49.093854 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:49.093954 | debian-bookworm | + 2025-11-11 00:02:49.094065 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-11-11 00:02:49.094173 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2025-11-11 00:02:49.094276 | debian-bookworm | + 2025-11-11 00:02:49.094381 | debian-bookworm | +## Critical elements access failures 2025-11-11 00:02:49.094495 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.094626 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.094737 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.094849 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.094957 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.095065 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.095175 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.095294 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-11-11 00:02:49.095407 | debian-bookworm | + 2025-11-11 00:02:49.095498 | debian-bookworm | +## Process ID change (switching accounts) applications 2025-11-11 00:02:49.095622 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2025-11-11 00:02:49.095726 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2025-11-11 00:02:49.095828 | debian-bookworm | + 2025-11-11 00:02:49.095938 | debian-bookworm | +## Power state 2025-11-11 00:02:49.096085 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2025-11-11 00:02:49.096226 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2025-11-11 00:02:49.096335 | debian-bookworm | +-w /sbin/reboot -p x -k power 2025-11-11 00:02:49.096446 | debian-bookworm | +-w /sbin/halt -p x -k power 2025-11-11 00:02:49.096578 | debian-bookworm | + 2025-11-11 00:02:49.096670 | debian-bookworm | +## Session initiation information 2025-11-11 00:02:49.096775 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2025-11-11 00:02:49.096883 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2025-11-11 00:02:49.097017 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2025-11-11 00:02:49.097117 | debian-bookworm | + 2025-11-11 00:02:49.097222 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2025-11-11 00:02:49.097330 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.097446 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.097579 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.097686 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.097794 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.097898 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098012 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098118 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098241 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098387 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098568 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.098776 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.099047 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:49.099058 | debian-bookworm | + 2025-11-11 00:02:49.099090 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2025-11-11 00:02:49.099195 | debian-bookworm | + 2025-11-11 00:02:49.099295 | debian-bookworm | +## Reconnaissance 2025-11-11 00:02:49.099427 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2025-11-11 00:02:49.099552 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2025-11-11 00:02:49.099665 | debian-bookworm | +-w /bin/hostname -p x -k recon 2025-11-11 00:02:49.099778 | debian-bookworm | +-w /bin/uname -p x -k recon 2025-11-11 00:02:49.099897 | debian-bookworm | +-w /etc/issue -p r -k recon 2025-11-11 00:02:49.100029 | debian-bookworm | +-w /etc/hostname -p r -k recon 2025-11-11 00:02:49.100129 | debian-bookworm | + 2025-11-11 00:02:49.100232 | debian-bookworm | +## Suspicious activity 2025-11-11 00:02:49.100338 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2025-11-11 00:02:49.100470 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2025-11-11 00:02:49.100625 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2025-11-11 00:02:49.100732 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2025-11-11 00:02:49.100846 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2025-11-11 00:02:49.101033 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2025-11-11 00:02:49.101108 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2025-11-11 00:02:49.101214 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2025-11-11 00:02:49.101318 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2025-11-11 00:02:49.101455 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2025-11-11 00:02:49.101679 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2025-11-11 00:02:49.101792 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2025-11-11 00:02:49.101892 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2025-11-11 00:02:49.102000 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2025-11-11 00:02:49.102102 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2025-11-11 00:02:49.102211 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2025-11-11 00:02:49.102316 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:49.102445 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:49.102602 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-11-11 00:02:49.103651 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:49.103681 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:49.103686 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2025-11-11 00:02:49.103690 | debian-bookworm | + 2025-11-11 00:02:49.103695 | debian-bookworm | +## sssd 2025-11-11 00:02:49.103700 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.103705 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.103709 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.103738 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.103907 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.103958 | debian-bookworm | + 2025-11-11 00:02:49.104104 | debian-bookworm | +## T1002 Data Compressed 2025-11-11 00:02:49.104166 | debian-bookworm | + 2025-11-11 00:02:49.104267 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2025-11-11 00:02:49.104378 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-11-11 00:02:49.104480 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2025-11-11 00:02:49.104609 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-11-11 00:02:49.104728 | debian-bookworm | + 2025-11-11 00:02:49.104811 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:49.104916 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:49.105050 | debian-bookworm | + 2025-11-11 00:02:49.105157 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:49.105267 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:49.105364 | debian-bookworm | + 2025-11-11 00:02:49.105468 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:49.105628 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:49.105731 | debian-bookworm | + 2025-11-11 00:02:49.105839 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:49.105939 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:49.106040 | debian-bookworm | + 2025-11-11 00:02:49.106145 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:49.106273 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:49.106346 | debian-bookworm | + 2025-11-11 00:02:49.106452 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:49.106622 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:49.106726 | debian-bookworm | + 2025-11-11 00:02:49.106827 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:49.106937 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:49.107032 | debian-bookworm | + 2025-11-11 00:02:49.107144 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:49.107248 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:49.107352 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:49.107454 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:49.107572 | debian-bookworm | + 2025-11-11 00:02:49.107670 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:49.107774 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:49.107953 | debian-bookworm | + 2025-11-11 00:02:49.107981 | debian-bookworm | +## Added to catch netcat on Ubuntu 2025-11-11 00:02:49.108073 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2025-11-11 00:02:49.108176 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2025-11-11 00:02:49.108283 | debian-bookworm | + 2025-11-11 00:02:49.108384 | debian-bookworm | +## Sbin suspicious activity 2025-11-11 00:02:49.108496 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2025-11-11 00:02:49.108624 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2025-11-11 00:02:49.108732 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2025-11-11 00:02:49.108833 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-11-11 00:02:49.108935 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-11-11 00:02:49.109079 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-11-11 00:02:49.109177 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2025-11-11 00:02:49.109283 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-11-11 00:02:49.109390 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-11-11 00:02:49.109492 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-11-11 00:02:49.109608 | debian-bookworm | + 2025-11-11 00:02:49.109712 | debian-bookworm | +### kde4 2025-11-11 00:02:49.109845 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.109972 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:49.110041 | debian-bookworm | + 2025-11-11 00:02:49.110229 | debian-bookworm | +## dbus-send invocation 2025-11-11 00:02:49.110412 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2025-11-11 00:02:49.110425 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-11-11 00:02:49.110458 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-11-11 00:02:49.110578 | debian-bookworm | + 2025-11-11 00:02:49.110684 | debian-bookworm | +## pkexec invocation 2025-11-11 00:02:49.110784 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2025-11-11 00:02:49.110889 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2025-11-11 00:02:49.110991 | debian-bookworm | + 2025-11-11 00:02:49.111095 | debian-bookworm | +## Suspicious shells 2025-11-11 00:02:49.111203 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2025-11-11 00:02:49.111305 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2025-11-11 00:02:49.111453 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2025-11-11 00:02:49.111514 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2025-11-11 00:02:49.111728 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2025-11-11 00:02:49.111741 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2025-11-11 00:02:49.113067 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-11-11 00:02:49.113095 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2025-11-11 00:02:49.113099 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2025-11-11 00:02:49.113104 | debian-bookworm | + 2025-11-11 00:02:49.113108 | debian-bookworm | +# Web Server Actvity 2025-11-11 00:02:49.113113 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-11-11 00:02:49.113118 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-11-11 00:02:49.113123 | debian-bookworm | + 2025-11-11 00:02:49.113127 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2025-11-11 00:02:49.113131 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2025-11-11 00:02:49.113135 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2025-11-11 00:02:49.113139 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-11-11 00:02:49.113148 | debian-bookworm | + 2025-11-11 00:02:49.114171 | debian-bookworm | +### https://github.com/tmux/tmux 2025-11-11 00:02:49.114203 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2025-11-11 00:02:49.114208 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-11-11 00:02:49.114212 | debian-bookworm | + 2025-11-11 00:02:49.114216 | debian-bookworm | +## Shell/profile configurations 2025-11-11 00:02:49.114220 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-11-11 00:02:49.114224 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2025-11-11 00:02:49.114228 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2025-11-11 00:02:49.114233 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2025-11-11 00:02:49.114237 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-11-11 00:02:49.114240 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2025-11-11 00:02:49.114248 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2025-11-11 00:02:49.115269 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2025-11-11 00:02:49.115296 | debian-bookworm | + 2025-11-11 00:02:49.115300 | debian-bookworm | +### https://github.com/xxh/xxh 2025-11-11 00:02:49.115305 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-11-11 00:02:49.115309 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-11-11 00:02:49.115313 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-11-11 00:02:49.115317 | debian-bookworm | + 2025-11-11 00:02:49.115321 | debian-bookworm | +## Injection 2025-11-11 00:02:49.115325 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2025-11-11 00:02:49.115329 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2025-11-11 00:02:49.115338 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-11-11 00:02:49.115448 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-11-11 00:02:49.115572 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-11-11 00:02:49.115673 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-11-11 00:02:49.115770 | debian-bookworm | + 2025-11-11 00:02:49.115879 | debian-bookworm | +## Anonymous File Creation 2025-11-11 00:02:49.115983 | debian-bookworm | +### These rules watch the use of memfd_create 2025-11-11 00:02:49.116091 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-11-11 00:02:49.116198 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-11-11 00:02:49.116316 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-11-11 00:02:49.116398 | debian-bookworm | + 2025-11-11 00:02:49.116504 | debian-bookworm | +## Privilege Abuse 2025-11-11 00:02:49.116625 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-11-11 00:02:49.116732 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-11-11 00:02:49.116831 | debian-bookworm | + 2025-11-11 00:02:49.116933 | debian-bookworm | +# Socket Creations 2025-11-11 00:02:49.117129 | debian-bookworm | +# will catch both IPv4 and IPv6 2025-11-11 00:02:49.117156 | debian-bookworm | + 2025-11-11 00:02:49.117263 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:49.117368 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:49.117466 | debian-bookworm | + 2025-11-11 00:02:49.117625 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:49.117702 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:49.117801 | debian-bookworm | + 2025-11-11 00:02:49.117902 | debian-bookworm | +# Software Management --------------------------------------------------------- 2025-11-11 00:02:49.118070 | debian-bookworm | + 2025-11-11 00:02:49.118108 | debian-bookworm | +# RPM (Redhat/CentOS) 2025-11-11 00:02:49.118210 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2025-11-11 00:02:49.118318 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2025-11-11 00:02:49.118415 | debian-bookworm | + 2025-11-11 00:02:49.118562 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-11-11 00:02:49.118640 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2025-11-11 00:02:49.118739 | debian-bookworm | + 2025-11-11 00:02:49.118842 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2025-11-11 00:02:49.118951 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2025-11-11 00:02:49.119056 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2025-11-11 00:02:49.119161 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2025-11-11 00:02:49.119265 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2025-11-11 00:02:49.119368 | debian-bookworm | + 2025-11-11 00:02:49.119471 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2025-11-11 00:02:49.119592 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-11-11 00:02:49.119697 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2025-11-11 00:02:49.119804 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-11-11 00:02:49.119910 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-11-11 00:02:49.120010 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-11-11 00:02:49.120109 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2025-11-11 00:02:49.120213 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2025-11-11 00:02:49.120312 | debian-bookworm | + 2025-11-11 00:02:49.120416 | debian-bookworm | +# PIP(3) (Python installs) 2025-11-11 00:02:49.120545 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:49.120654 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:49.120760 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:49.120863 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:49.120972 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:49.121097 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:49.121196 | debian-bookworm | + 2025-11-11 00:02:49.121303 | debian-bookworm | +# npm 2025-11-11 00:02:49.121409 | debian-bookworm | +## T1072 third party software 2025-11-11 00:02:49.121515 | debian-bookworm | +## https://www.npmjs.com 2025-11-11 00:02:49.121634 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-11-11 00:02:49.121745 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-11-11 00:02:49.121847 | debian-bookworm | + 2025-11-11 00:02:49.121952 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-11-11 00:02:49.122054 | debian-bookworm | +## T1072 third party software 2025-11-11 00:02:49.122161 | debian-bookworm | +## https://www.cpan.org 2025-11-11 00:02:49.122267 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-11-11 00:02:49.122370 | debian-bookworm | + 2025-11-11 00:02:49.122476 | debian-bookworm | +# Ruby (RubyGems installs) 2025-11-11 00:02:49.122595 | debian-bookworm | +## T1072 third party software 2025-11-11 00:02:49.122699 | debian-bookworm | +## https://rubygems.org 2025-11-11 00:02:49.122803 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-11-11 00:02:49.122906 | debian-bookworm | + 2025-11-11 00:02:49.123009 | debian-bookworm | +# LuaRocks (Lua installs) 2025-11-11 00:02:49.123116 | debian-bookworm | +## T1072 third party software 2025-11-11 00:02:49.123220 | debian-bookworm | +## https://luarocks.org 2025-11-11 00:02:49.123326 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-11-11 00:02:49.123425 | debian-bookworm | + 2025-11-11 00:02:49.123559 | debian-bookworm | +# Pacman (Arch Linux) 2025-11-11 00:02:49.123657 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2025-11-11 00:02:49.123761 | debian-bookworm | +## T1072 third party software 2025-11-11 00:02:49.123868 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-11-11 00:02:49.123992 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-11-11 00:02:49.124075 | debian-bookworm | + 2025-11-11 00:02:49.124180 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2025-11-11 00:02:49.124280 | debian-bookworm | + 2025-11-11 00:02:49.124385 | debian-bookworm | +## GDS specific secrets 2025-11-11 00:02:49.124489 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-11-11 00:02:49.124600 | debian-bookworm | + 2025-11-11 00:02:49.124705 | debian-bookworm | +## IBM Bigfix BESClient 2025-11-11 00:02:49.124820 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-11-11 00:02:49.124927 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-11-11 00:02:49.125210 | debian-bookworm | + 2025-11-11 00:02:49.125222 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2025-11-11 00:02:49.125244 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2025-11-11 00:02:49.125346 | debian-bookworm | + 2025-11-11 00:02:49.125449 | debian-bookworm | +## Salt 2025-11-11 00:02:49.125585 | debian-bookworm | +## https://saltproject.io/ 2025-11-11 00:02:49.125674 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-11-11 00:02:49.125781 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2025-11-11 00:02:49.125885 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-11-11 00:02:49.125985 | debian-bookworm | + 2025-11-11 00:02:49.126086 | debian-bookworm | +## Otter 2025-11-11 00:02:49.126192 | debian-bookworm | +## https://inedo.com/otter 2025-11-11 00:02:49.126303 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2025-11-11 00:02:49.126392 | debian-bookworm | + 2025-11-11 00:02:49.126501 | debian-bookworm | +## T1081 Credentials In Files 2025-11-11 00:02:49.126630 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2025-11-11 00:02:49.126734 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2025-11-11 00:02:49.126839 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2025-11-11 00:02:49.126941 | debian-bookworm | +### macOS 2025-11-11 00:02:49.127043 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2025-11-11 00:02:49.127151 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2025-11-11 00:02:49.127256 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2025-11-11 00:02:49.127396 | debian-bookworm | + 2025-11-11 00:02:49.127461 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2025-11-11 00:02:49.127580 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2025-11-11 00:02:49.127681 | debian-bookworm | +### macOS 2025-11-11 00:02:49.127785 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2025-11-11 00:02:49.127888 | debian-bookworm | + 2025-11-11 00:02:49.127993 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2025-11-11 00:02:49.128096 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2025-11-11 00:02:49.128196 | debian-bookworm | +### macOS 2025-11-11 00:02:49.128299 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2025-11-11 00:02:49.128397 | debian-bookworm | + 2025-11-11 00:02:49.128505 | debian-bookworm | +### https://github.com/awgn/cgrep 2025-11-11 00:02:49.128650 | debian-bookworm | + 2025-11-11 00:02:49.128758 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2025-11-11 00:02:49.128859 | debian-bookworm | +### macOS 2025-11-11 00:02:49.128961 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2025-11-11 00:02:49.129087 | debian-bookworm | + 2025-11-11 00:02:49.129197 | debian-bookworm | +### https://github.com/jpr5/ngrep 2025-11-11 00:02:49.129303 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2025-11-11 00:02:49.129406 | debian-bookworm | +### macOS 2025-11-11 00:02:49.129510 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2025-11-11 00:02:49.129627 | debian-bookworm | + 2025-11-11 00:02:49.129731 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2025-11-11 00:02:49.129836 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2025-11-11 00:02:49.129941 | debian-bookworm | +### macOS 2025-11-11 00:02:49.130048 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2025-11-11 00:02:49.130144 | debian-bookworm | + 2025-11-11 00:02:49.130249 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2025-11-11 00:02:49.130352 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2025-11-11 00:02:49.130453 | debian-bookworm | +### macOS 2025-11-11 00:02:49.130601 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2025-11-11 00:02:49.130734 | debian-bookworm | + 2025-11-11 00:02:49.130839 | debian-bookworm | +### https://github.com/gvansickle/ucg 2025-11-11 00:02:49.130940 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2025-11-11 00:02:49.131038 | debian-bookworm | +### macOS 2025-11-11 00:02:49.131138 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2025-11-11 00:02:49.131236 | debian-bookworm | + 2025-11-11 00:02:49.131338 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2025-11-11 00:02:49.131441 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2025-11-11 00:02:49.131555 | debian-bookworm | +### macOS 2025-11-11 00:02:49.131661 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2025-11-11 00:02:49.131775 | debian-bookworm | + 2025-11-11 00:02:49.131869 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2025-11-11 00:02:49.131972 | debian-bookworm | +### https://beyondgrep.com 2025-11-11 00:02:49.132073 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2025-11-11 00:02:49.132193 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2025-11-11 00:02:49.132300 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2025-11-11 00:02:49.132404 | debian-bookworm | +### macOS 2025-11-11 00:02:49.132508 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2025-11-11 00:02:49.132652 | debian-bookworm | + 2025-11-11 00:02:49.132759 | debian-bookworm | +## Docker 2025-11-11 00:02:49.132864 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2025-11-11 00:02:49.132966 | debian-bookworm | +-w /usr/bin/docker -k docker 2025-11-11 00:02:49.133092 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2025-11-11 00:02:49.133194 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2025-11-11 00:02:49.133297 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2025-11-11 00:02:49.133404 | debian-bookworm | +-w /etc/docker -k docker 2025-11-11 00:02:49.133505 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2025-11-11 00:02:49.133623 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2025-11-11 00:02:49.133726 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2025-11-11 00:02:49.133828 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-11-11 00:02:49.133952 | debian-bookworm | + 2025-11-11 00:02:49.134053 | debian-bookworm | +## Virtualization stuff 2025-11-11 00:02:49.134139 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-11-11 00:02:49.134246 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-11-11 00:02:49.134354 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-11-11 00:02:49.134455 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2025-11-11 00:02:49.134580 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-11-11 00:02:49.134678 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-11-11 00:02:49.134780 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-11-11 00:02:49.134879 | debian-bookworm | + 2025-11-11 00:02:49.134987 | debian-bookworm | +#### VirtualBox on macOS 2025-11-11 00:02:49.135087 | debian-bookworm | + 2025-11-11 00:02:49.135188 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-11-11 00:02:49.135293 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-11-11 00:02:49.135398 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-11-11 00:02:49.135503 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-11-11 00:02:49.135640 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-11-11 00:02:49.135744 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-11-11 00:02:49.135854 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-11-11 00:02:49.135957 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-11-11 00:02:49.136064 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-11-11 00:02:49.136169 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-11-11 00:02:49.136272 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-11-11 00:02:49.136381 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-11-11 00:02:49.136491 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-11-11 00:02:49.136613 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-11-11 00:02:49.136717 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-11-11 00:02:49.136825 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-11-11 00:02:49.136928 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-11-11 00:02:49.137052 | debian-bookworm | + 2025-11-11 00:02:49.137157 | debian-bookworm | +### Parallels Desktop on macOS 2025-11-11 00:02:49.137255 | debian-bookworm | + 2025-11-11 00:02:49.137448 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-11-11 00:02:49.137596 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-11-11 00:02:49.137701 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-11-11 00:02:49.137804 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-11-11 00:02:49.137914 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-11-11 00:02:49.138010 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-11-11 00:02:49.138119 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-11-11 00:02:49.138225 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-11-11 00:02:49.138324 | debian-bookworm | + 2025-11-11 00:02:49.138430 | debian-bookworm | +### qemu on macOS 2025-11-11 00:02:49.138577 | debian-bookworm | + 2025-11-11 00:02:49.138647 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-11-11 00:02:49.138752 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-11-11 00:02:49.138860 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-11-11 00:02:49.138964 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-11-11 00:02:49.139070 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-11-11 00:02:49.139169 | debian-bookworm | + 2025-11-11 00:02:49.139272 | debian-bookworm | +## Kubelet 2025-11-11 00:02:49.139375 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2025-11-11 00:02:49.139476 | debian-bookworm | + 2025-11-11 00:02:49.139598 | debian-bookworm | +# ipc system call 2025-11-11 00:02:49.139698 | debian-bookworm | +# /usr/include/linux/ipc.h 2025-11-11 00:02:49.139799 | debian-bookworm | + 2025-11-11 00:02:49.139902 | debian-bookworm | +## msgctl 2025-11-11 00:02:49.140008 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-11-11 00:02:49.140111 | debian-bookworm | +## msgget 2025-11-11 00:02:49.140221 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-11-11 00:02:49.140326 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:49.140460 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-11-11 00:02:49.140577 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-11-11 00:02:49.140681 | debian-bookworm | + 2025-11-11 00:02:49.140789 | debian-bookworm | +## semctl 2025-11-11 00:02:49.140898 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-11-11 00:02:49.141024 | debian-bookworm | +## semget 2025-11-11 00:02:49.141136 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-11-11 00:02:49.141242 | debian-bookworm | +## semop 2025-11-11 00:02:49.141349 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-11-11 00:02:49.141519 | debian-bookworm | +## semtimedop 2025-11-11 00:02:49.141656 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-11-11 00:02:49.141767 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:49.141880 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-11-11 00:02:49.141988 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-11-11 00:02:49.142098 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-11-11 00:02:49.142206 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-11-11 00:02:49.142309 | debian-bookworm | + 2025-11-11 00:02:49.142438 | debian-bookworm | +## shmctl 2025-11-11 00:02:49.142575 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-11-11 00:02:49.142670 | debian-bookworm | +## shmget 2025-11-11 00:02:49.142786 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-11-11 00:02:49.142890 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:49.142996 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-11-11 00:02:49.143102 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-11-11 00:02:49.143204 | debian-bookworm | + 2025-11-11 00:02:49.143308 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2025-11-11 00:02:49.143437 | debian-bookworm | + 2025-11-11 00:02:49.143563 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2025-11-11 00:02:49.143669 | debian-bookworm | + 2025-11-11 00:02:49.143775 | debian-bookworm | +## Common Shells 2025-11-11 00:02:49.143887 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2025-11-11 00:02:49.143998 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2025-11-11 00:02:49.144108 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2025-11-11 00:02:49.144217 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2025-11-11 00:02:49.144316 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2025-11-11 00:02:49.144449 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2025-11-11 00:02:49.144582 | debian-bookworm | + 2025-11-11 00:02:49.144708 | debian-bookworm | +## Root command executions 2025-11-11 00:02:49.144838 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-11-11 00:02:49.144933 | debian-bookworm | + 2025-11-11 00:02:49.145069 | debian-bookworm | +## File Deletion Events by User 2025-11-11 00:02:49.145186 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-11-11 00:02:49.145284 | debian-bookworm | + 2025-11-11 00:02:49.145411 | debian-bookworm | +## File Access 2025-11-11 00:02:49.145591 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2025-11-11 00:02:49.145693 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:49.145808 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:49.145936 | debian-bookworm | + 2025-11-11 00:02:49.146014 | debian-bookworm | +### Unsuccessful Creation 2025-11-11 00:02:49.146125 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-11-11 00:02:49.146234 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-11-11 00:02:49.146335 | debian-bookworm | + 2025-11-11 00:02:49.146464 | debian-bookworm | +### Unsuccessful Modification 2025-11-11 00:02:49.146597 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-11-11 00:02:49.146709 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-11-11 00:02:49.146809 | debian-bookworm | + 2025-11-11 00:02:49.146912 | debian-bookworm | +## 32bit API Exploitation 2025-11-11 00:02:49.147020 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2025-11-11 00:02:49.147125 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-11-11 00:02:49.147232 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2025-11-11 00:02:49.147333 | debian-bookworm | +### bit API. 2025-11-11 00:02:49.147458 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-11-11 00:02:49.147577 | debian-bookworm | + 2025-11-11 00:02:49.147685 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2025-11-11 00:02:49.147789 | debian-bookworm | + 2025-11-11 00:02:49.147890 | debian-bookworm | +##-e 2 2025-11-11 00:02:49.147992 | debian-bookworm | 2025-11-11 00:02:49.148260 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819367.900932-2541-125017921861776/.source.rules", "state": "file", "uid": 0} 2025-11-11 00:02:49.148354 | debian-bookworm | 2025-11-11 00:02:49.148485 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2025-11-11 00:02:49.214250 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:40 UTC", "ActiveEnterTimestampMonotonic": "262572427", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:39 UTC", "AssertTimestampMonotonic": "262516107", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "39660000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:39 UTC", "ConditionTimestampMonotonic": "262515996", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2165", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:40 UTC", "ExecMainStartTimestampMonotonic": "262546569", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2164 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:39 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2164 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:40 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2169 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:40 UTC] ; stop_time=[Tue 2025-11-11 00:02:40 UTC] ; pid=2169 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:39 UTC", "InactiveExitTimestampMonotonic": "262522542", "InvocationID": "d4c5a2db73a946fbb08755b54c8d62c6", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15379", "LimitNPROCSoft": "15379", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15379", "LimitSIGPENDINGSoft": "15379", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2165", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3512520704", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2355200", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-11-11 00:02:40 UTC", "StateChangeTimestampMonotonic": "262572427", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4613", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:49.218288 | ubuntu-noble | 2025-11-11 00:02:49.218466 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-11-11 00:02:48.854377 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:47 UTC", "ActiveEnterTimestampMonotonic": "291729925", "ActiveExitTimestamp": "Tue 2025-11-11 00:02:47 UTC", "ActiveExitTimestampMonotonic": "291568831", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket local-fs.target system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:47 UTC", "AssertTimestampMonotonic": "291606693", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "168802000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:47 UTC", "ConditionTimestampMonotonic": "291606638", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2065", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:47 UTC", "ExecMainStartTimestampMonotonic": "291630151", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:47 UTC] ; stop_time=[Tue 2025-11-11 00:02:47 UTC] ; pid=2064 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:47 UTC] ; stop_time=[Tue 2025-11-11 00:02:47 UTC] ; pid=2064 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:47 UTC] ; stop_time=[Tue 2025-11-11 00:02:47 UTC] ; pid=2068 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:47 UTC] ; stop_time=[Tue 2025-11-11 00:02:47 UTC] ; pid=2068 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-11-11 00:02:47 UTC", "InactiveEnterTimestampMonotonic": "291605630", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:47 UTC", "InactiveExitTimestampMonotonic": "291609292", "InvocationID": "0b86ac40ffdf4043a2e04e0b6a5f2692", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15329", "LimitNPROCSoft": "15329", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15329", "LimitSIGPENDINGSoft": "15329", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2065", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "1875968", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:47 UTC", "StateChangeTimestampMonotonic": "291729925", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4598", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:48.855088 | ubuntu-jammy | 2025-11-11 00:02:48.855108 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-11-11 00:02:48.855115 | ubuntu-jammy | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:48.855120 | ubuntu-jammy | 2025-11-11 00:02:48.924358 | ubuntu-jammy | INFO [delegated > converge] Executed: Successful 2025-11-11 00:02:48.924784 | ubuntu-jammy | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:49.006028 | centos-9-stream | --- before 2025-11-11 00:02:49.006213 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-194680c0n44t/tmpp4rmvg_k/auditd.conf.j2 2025-11-11 00:02:49.006284 | centos-9-stream | @@ -0,0 +1,37 @@ 2025-11-11 00:02:49.006441 | centos-9-stream | +# 2025-11-11 00:02:49.006582 | centos-9-stream | +# This file controls the configuration of the audit daemon 2025-11-11 00:02:49.006793 | centos-9-stream | +# 2025-11-11 00:02:49.006860 | centos-9-stream | + 2025-11-11 00:02:49.007030 | centos-9-stream | +local_events = yes 2025-11-11 00:02:49.007242 | centos-9-stream | +write_logs = yes 2025-11-11 00:02:49.007406 | centos-9-stream | +log_file = /var/log/audit/audit.log 2025-11-11 00:02:49.007560 | centos-9-stream | +log_group = adm 2025-11-11 00:02:49.007738 | centos-9-stream | +log_format = RAW 2025-11-11 00:02:49.007900 | centos-9-stream | +flush = INCREMENTAL_ASYNC 2025-11-11 00:02:49.008043 | centos-9-stream | +freq = 50 2025-11-11 00:02:49.008209 | centos-9-stream | +max_log_file = 8 2025-11-11 00:02:49.008460 | centos-9-stream | +num_logs = 5 2025-11-11 00:02:49.008668 | centos-9-stream | +priority_boost = 4 2025-11-11 00:02:49.008886 | centos-9-stream | +disp_qos = lossy 2025-11-11 00:02:49.009091 | centos-9-stream | +dispatcher = /sbin/audispd 2025-11-11 00:02:49.009520 | centos-9-stream | +name_format = NONE 2025-11-11 00:02:49.009765 | centos-9-stream | +##name = mydomain 2025-11-11 00:02:49.009851 | centos-9-stream | +max_log_file_action = ROTATE 2025-11-11 00:02:49.009990 | centos-9-stream | +space_left = 12361 2025-11-11 00:02:49.010163 | centos-9-stream | +space_left_action = email 2025-11-11 00:02:49.010262 | centos-9-stream | +verify_email = yes 2025-11-11 00:02:49.010371 | centos-9-stream | +action_mail_acct = root 2025-11-11 00:02:49.010499 | centos-9-stream | +admin_space_left = 50 2025-11-11 00:02:49.010643 | centos-9-stream | +admin_space_left_action = SUSPEND 2025-11-11 00:02:49.010782 | centos-9-stream | +disk_full_action = SUSPEND 2025-11-11 00:02:49.010885 | centos-9-stream | +disk_error_action = SUSPEND 2025-11-11 00:02:49.010989 | centos-9-stream | +use_libwrap = yes 2025-11-11 00:02:49.011099 | centos-9-stream | +##tcp_listen_port = 60 2025-11-11 00:02:49.011223 | centos-9-stream | +tcp_listen_queue = 5 2025-11-11 00:02:49.011322 | centos-9-stream | +tcp_max_per_addr = 1 2025-11-11 00:02:49.011430 | centos-9-stream | +##tcp_client_ports = 1024-65535 2025-11-11 00:02:49.011529 | centos-9-stream | +tcp_client_max_idle = 0 2025-11-11 00:02:49.011632 | centos-9-stream | +enable_krb5 = no 2025-11-11 00:02:49.011746 | centos-9-stream | +krb5_principal = auditd 2025-11-11 00:02:49.011850 | centos-9-stream | +##krb5_key_file = /etc/audit/audit.key 2025-11-11 00:02:49.011948 | centos-9-stream | +distribute_network = no 2025-11-11 00:02:49.012044 | centos-9-stream | 2025-11-11 00:02:49.012227 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819367.074174-2086-131080296193542/.source.conf", "state": "file", "uid": 0} 2025-11-11 00:02:49.012311 | centos-9-stream | 2025-11-11 00:02:49.012417 | centos-9-stream | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-11-11 00:02:49.646961 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.055559", "end": "2025-11-11 00:02:49.604496", "msg": "", "rc": 0, "start": "2025-11-11 00:02:49.548937", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2557\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 536\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2557\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 531\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2557", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 536", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2557", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 531", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-11-11 00:02:49.647129 | ubuntu-noble | 2025-11-11 00:02:49.647310 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:49.508070 | centos-9-stream | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-11-11 00:02:49.508464 | centos-9-stream | 2025-11-11 00:02:49.508857 | centos-9-stream | TASK [auditd : Deploy rules for auditd] **************************************** 2025-11-11 00:02:50.067176 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ActiveEnterTimestampMonotonic": "300027096", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket system.slice local-fs.target systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:41 UTC", "AssertTimestampMonotonic": "299947203", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "52156000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ConditionTimestampMonotonic": "299947159", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2311", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ExecMainStartTimestampMonotonic": "299996328", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2310 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2310 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2314 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2314 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:41 UTC", "InactiveExitTimestampMonotonic": "299977267", "InvocationID": "44f6e3d98424441caf4d6834d89f7d16", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2311", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:41 UTC", "StateChangeTimestampMonotonic": "300027096", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:50.072175 | debian-bookworm | 2025-11-11 00:02:50.072261 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2025-11-11 00:02:50.774049 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.006839", "end": "2025-11-11 00:02:50.699705", "msg": "", "rc": 0, "start": "2025-11-11 00:02:50.692866", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-11-11 00:02:50.774140 | debian-bookworm | 2025-11-11 00:02:50.774156 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-11-11 00:02:50.399124 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:49 UTC", "ActiveEnterTimestampMonotonic": "271701301", "ActiveExitTimestamp": "Tue 2025-11-11 00:02:49 UTC", "ActiveExitTimestampMonotonic": "271595783", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:49 UTC", "AssertTimestampMonotonic": "271633729", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "106397000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:49 UTC", "ConditionTimestampMonotonic": "271633659", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2557", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:49 UTC", "ExecMainStartTimestampMonotonic": "271646135", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:49 UTC] ; stop_time=[Tue 2025-11-11 00:02:49 UTC] ; pid=2556 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:49 UTC] ; stop_time=[Tue 2025-11-11 00:02:49 UTC] ; pid=2556 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:49 UTC] ; stop_time=[Tue 2025-11-11 00:02:49 UTC] ; pid=2560 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:49 UTC] ; stop_time=[Tue 2025-11-11 00:02:49 UTC] ; pid=2560 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-11-11 00:02:49 UTC", "InactiveEnterTimestampMonotonic": "271632719", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:49 UTC", "InactiveExitTimestampMonotonic": "271638565", "InvocationID": "6a10d387e77c470a8cbd9ba427613506", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15379", "LimitNPROCSoft": "15379", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15379", "LimitSIGPENDINGSoft": "15379", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2557", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3524390912", "MemoryCurrent": "1859584", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2224128", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-11-11 00:02:49 UTC", "StateChangeTimestampMonotonic": "271701301", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4613", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:50.400038 | ubuntu-noble | 2025-11-11 00:02:50.400210 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-11-11 00:02:50.400412 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:50.400572 | ubuntu-noble | 2025-11-11 00:02:50.481764 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2025-11-11 00:02:50.482508 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:50.792141 | centos-9-stream | --- before 2025-11-11 00:02:50.792258 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-194680c0n44t/tmpfe6nw_9j/20-neo23x0.rules.j2 2025-11-11 00:02:50.792310 | centos-9-stream | @@ -0,0 +1,750 @@ 2025-11-11 00:02:50.792417 | centos-9-stream | +# ___ ___ __ __ 2025-11-11 00:02:50.792521 | centos-9-stream | +# / | __ ______/ (_) /_____/ / 2025-11-11 00:02:50.792624 | centos-9-stream | +# / /| |/ / / / __ / / __/ __ / 2025-11-11 00:02:50.792770 | centos-9-stream | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-11-11 00:02:50.792873 | centos-9-stream | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-11-11 00:02:50.792976 | centos-9-stream | +# 2025-11-11 00:02:50.793082 | centos-9-stream | +# Linux Audit Daemon - Best Practice Configuration 2025-11-11 00:02:50.793222 | centos-9-stream | +# /etc/audit/audit.rules 2025-11-11 00:02:50.793325 | centos-9-stream | +# 2025-11-11 00:02:50.793427 | centos-9-stream | +# Compiled by Florian Roth 2025-11-11 00:02:50.793527 | centos-9-stream | +# 2025-11-11 00:02:50.793628 | centos-9-stream | +# Created : 2017/12/05 2025-11-11 00:02:50.793746 | centos-9-stream | +# Modified : 2023/01/25 2025-11-11 00:02:50.793848 | centos-9-stream | +# 2025-11-11 00:02:50.793954 | centos-9-stream | +# Based on rules published here: 2025-11-11 00:02:50.794052 | centos-9-stream | +# Gov.uk auditd rules 2025-11-11 00:02:50.794362 | centos-9-stream | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-11-11 00:02:50.794528 | centos-9-stream | +# CentOS 7 hardening 2025-11-11 00:02:50.794766 | centos-9-stream | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-11-11 00:02:50.794866 | centos-9-stream | +# Linux audit repo 2025-11-11 00:02:50.795024 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-11-11 00:02:50.795201 | centos-9-stream | +# Auditd high performance linux auditing 2025-11-11 00:02:50.795364 | centos-9-stream | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-11-11 00:02:50.795467 | centos-9-stream | +# 2025-11-11 00:02:50.795571 | centos-9-stream | +# Further rules 2025-11-11 00:02:50.795732 | centos-9-stream | +# For PCI DSS compliance see: 2025-11-11 00:02:50.795891 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-11-11 00:02:50.796032 | centos-9-stream | +# For NISPOM compliance see: 2025-11-11 00:02:50.796216 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-11-11 00:02:50.796320 | centos-9-stream | + 2025-11-11 00:02:50.796424 | centos-9-stream | +# Remove any existing rules 2025-11-11 00:02:50.796525 | centos-9-stream | +-D 2025-11-11 00:02:50.796625 | centos-9-stream | + 2025-11-11 00:02:50.796764 | centos-9-stream | +# Buffer Size 2025-11-11 00:02:50.796869 | centos-9-stream | +## Feel free to increase this if the machine panic's 2025-11-11 00:02:50.796974 | centos-9-stream | +-b 8192 2025-11-11 00:02:50.797077 | centos-9-stream | + 2025-11-11 00:02:50.797211 | centos-9-stream | +# Failure Mode 2025-11-11 00:02:50.797329 | centos-9-stream | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-11-11 00:02:50.797430 | centos-9-stream | +-f 1 2025-11-11 00:02:50.797530 | centos-9-stream | + 2025-11-11 00:02:50.797633 | centos-9-stream | +# Ignore errors 2025-11-11 00:02:50.797756 | centos-9-stream | +## e.g. caused by users or files not found in the local environment 2025-11-11 00:02:50.797855 | centos-9-stream | +-i 2025-11-11 00:02:50.797952 | centos-9-stream | + 2025-11-11 00:02:50.798054 | centos-9-stream | +# Self Auditing --------------------------------------------------------------- 2025-11-11 00:02:50.798171 | centos-9-stream | + 2025-11-11 00:02:50.798277 | centos-9-stream | +## Audit the audit logs 2025-11-11 00:02:50.798389 | centos-9-stream | +### Successful and unsuccessful attempts to read information from the audit records 2025-11-11 00:02:50.798495 | centos-9-stream | +-w /var/log/audit/ -p wra -k auditlog 2025-11-11 00:02:50.798602 | centos-9-stream | +-w /var/audit/ -p wra -k auditlog 2025-11-11 00:02:50.798726 | centos-9-stream | + 2025-11-11 00:02:50.798823 | centos-9-stream | +## Auditd configuration 2025-11-11 00:02:50.798940 | centos-9-stream | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-11-11 00:02:50.799046 | centos-9-stream | +-w /etc/audit/ -p wa -k auditconfig 2025-11-11 00:02:50.799174 | centos-9-stream | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-11-11 00:02:50.799281 | centos-9-stream | +-w /etc/audisp/ -p wa -k audispconfig 2025-11-11 00:02:50.799382 | centos-9-stream | + 2025-11-11 00:02:50.799494 | centos-9-stream | +## Monitor for use of audit management tools 2025-11-11 00:02:50.799603 | centos-9-stream | +-w /sbin/auditctl -p x -k audittools 2025-11-11 00:02:50.799720 | centos-9-stream | +-w /sbin/auditd -p x -k audittools 2025-11-11 00:02:50.799825 | centos-9-stream | +-w /usr/sbin/auditd -p x -k audittools 2025-11-11 00:02:50.799928 | centos-9-stream | +-w /usr/sbin/augenrules -p x -k audittools 2025-11-11 00:02:50.800032 | centos-9-stream | + 2025-11-11 00:02:50.800161 | centos-9-stream | +## Access to all audit trails 2025-11-11 00:02:50.800260 | centos-9-stream | + 2025-11-11 00:02:50.800368 | centos-9-stream | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-11-11 00:02:50.800475 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-11-11 00:02:50.800587 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-11-11 00:02:50.800721 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-11-11 00:02:50.800833 | centos-9-stream | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-11-11 00:02:50.800934 | centos-9-stream | + 2025-11-11 00:02:50.801042 | centos-9-stream | +# Filters --------------------------------------------------------------------- 2025-11-11 00:02:50.801173 | centos-9-stream | + 2025-11-11 00:02:50.801286 | centos-9-stream | +### We put these early because audit is a first match wins system. 2025-11-11 00:02:50.801389 | centos-9-stream | + 2025-11-11 00:02:50.801497 | centos-9-stream | +## Ignore SELinux AVC records 2025-11-11 00:02:50.801604 | centos-9-stream | +-a always,exclude -F msgtype=AVC 2025-11-11 00:02:50.801724 | centos-9-stream | + 2025-11-11 00:02:50.801826 | centos-9-stream | +## Ignore current working directory records 2025-11-11 00:02:50.801935 | centos-9-stream | +-a always,exclude -F msgtype=CWD 2025-11-11 00:02:50.802039 | centos-9-stream | + 2025-11-11 00:02:50.802174 | centos-9-stream | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-11-11 00:02:50.802283 | centos-9-stream | +-a never,user -F subj_type=crond_t 2025-11-11 00:02:50.802402 | centos-9-stream | +-a never,exit -F subj_type=crond_t 2025-11-11 00:02:50.802506 | centos-9-stream | + 2025-11-11 00:02:50.802615 | centos-9-stream | +## This prevents chrony from overwhelming the logs 2025-11-11 00:02:50.802762 | centos-9-stream | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-11-11 00:02:50.802865 | centos-9-stream | + 2025-11-11 00:02:50.802978 | centos-9-stream | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-11-11 00:02:50.803088 | centos-9-stream | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-11-11 00:02:50.803220 | centos-9-stream | + 2025-11-11 00:02:50.803335 | centos-9-stream | +## Open VM Tools 2025-11-11 00:02:50.803433 | centos-9-stream | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-11-11 00:02:50.803532 | centos-9-stream | + 2025-11-11 00:02:50.803641 | centos-9-stream | +## High Volume Event Filter (especially on Linux Workstations) 2025-11-11 00:02:50.803762 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-11-11 00:02:50.803866 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-11-11 00:02:50.803964 | centos-9-stream | + 2025-11-11 00:02:50.804071 | centos-9-stream | +## FileBeat 2025-11-11 00:02:50.804192 | centos-9-stream | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-11-11 00:02:50.804292 | centos-9-stream | + 2025-11-11 00:02:50.804397 | centos-9-stream | +## More information on how to filter events 2025-11-11 00:02:50.804499 | centos-9-stream | +### https://access.redhat.com/solutions/2482221 2025-11-11 00:02:50.804600 | centos-9-stream | + 2025-11-11 00:02:50.804724 | centos-9-stream | +# Rules ----------------------------------------------------------------------- 2025-11-11 00:02:50.804828 | centos-9-stream | + 2025-11-11 00:02:50.804931 | centos-9-stream | +## Kernel parameters 2025-11-11 00:02:50.805035 | centos-9-stream | +-w /etc/sysctl.conf -p wa -k sysctl 2025-11-11 00:02:50.805154 | centos-9-stream | +-w /etc/sysctl.d -p wa -k sysctl 2025-11-11 00:02:50.805254 | centos-9-stream | + 2025-11-11 00:02:50.805353 | centos-9-stream | +## Kernel module loading and unloading 2025-11-11 00:02:50.805463 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-11-11 00:02:50.805569 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-11-11 00:02:50.805710 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-11-11 00:02:50.805800 | centos-9-stream | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-11-11 00:02:50.805901 | centos-9-stream | + 2025-11-11 00:02:50.813185 | centos-9-stream | +## Modprobe configuration 2025-11-11 00:02:50.813248 | centos-9-stream | +-w /etc/modprobe.conf -p wa -k modprobe 2025-11-11 00:02:50.813255 | centos-9-stream | +-w /etc/modprobe.d -p wa -k modprobe 2025-11-11 00:02:50.813259 | centos-9-stream | + 2025-11-11 00:02:50.813264 | centos-9-stream | +## KExec usage (all actions) 2025-11-11 00:02:50.813268 | centos-9-stream | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-11-11 00:02:50.813272 | centos-9-stream | + 2025-11-11 00:02:50.813277 | centos-9-stream | +## Special files 2025-11-11 00:02:50.813281 | centos-9-stream | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-11-11 00:02:50.813285 | centos-9-stream | + 2025-11-11 00:02:50.813289 | centos-9-stream | +## Mount operations (only attributable) 2025-11-11 00:02:50.813293 | centos-9-stream | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-11-11 00:02:50.813298 | centos-9-stream | + 2025-11-11 00:02:50.813302 | centos-9-stream | +### NFS mount 2025-11-11 00:02:50.813307 | centos-9-stream | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.813312 | centos-9-stream | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.813316 | centos-9-stream | + 2025-11-11 00:02:50.813320 | centos-9-stream | +## Change swap (only attributable) 2025-11-11 00:02:50.813324 | centos-9-stream | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-11-11 00:02:50.813327 | centos-9-stream | + 2025-11-11 00:02:50.813331 | centos-9-stream | +## Time 2025-11-11 00:02:50.813335 | centos-9-stream | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-11-11 00:02:50.813340 | centos-9-stream | +### Local time zone 2025-11-11 00:02:50.813344 | centos-9-stream | +-w /etc/localtime -p wa -k localtime 2025-11-11 00:02:50.813348 | centos-9-stream | + 2025-11-11 00:02:50.813352 | centos-9-stream | +## Stunnel 2025-11-11 00:02:50.813356 | centos-9-stream | +-w /usr/sbin/stunnel -p x -k stunnel 2025-11-11 00:02:50.813360 | centos-9-stream | +-w /usr/bin/stunnel -p x -k stunnel 2025-11-11 00:02:50.813363 | centos-9-stream | + 2025-11-11 00:02:50.813367 | centos-9-stream | +## Cron configuration & scheduled jobs 2025-11-11 00:02:50.813371 | centos-9-stream | +-w /etc/cron.allow -p wa -k cron 2025-11-11 00:02:50.813375 | centos-9-stream | +-w /etc/cron.deny -p wa -k cron 2025-11-11 00:02:50.813378 | centos-9-stream | +-w /etc/cron.d/ -p wa -k cron 2025-11-11 00:02:50.813382 | centos-9-stream | +-w /etc/cron.daily/ -p wa -k cron 2025-11-11 00:02:50.813386 | centos-9-stream | +-w /etc/cron.hourly/ -p wa -k cron 2025-11-11 00:02:50.813390 | centos-9-stream | +-w /etc/cron.monthly/ -p wa -k cron 2025-11-11 00:02:50.813394 | centos-9-stream | +-w /etc/cron.weekly/ -p wa -k cron 2025-11-11 00:02:50.813397 | centos-9-stream | +-w /etc/crontab -p wa -k cron 2025-11-11 00:02:50.813401 | centos-9-stream | +-w /var/spool/cron/ -p wa -k cron 2025-11-11 00:02:50.813405 | centos-9-stream | + 2025-11-11 00:02:50.813409 | centos-9-stream | +## User, group, password databases 2025-11-11 00:02:50.813412 | centos-9-stream | +-w /etc/group -p wa -k etcgroup 2025-11-11 00:02:50.813416 | centos-9-stream | +-w /etc/passwd -p wa -k etcpasswd 2025-11-11 00:02:50.813420 | centos-9-stream | +-w /etc/gshadow -k etcgroup 2025-11-11 00:02:50.813424 | centos-9-stream | +-w /etc/shadow -k etcpasswd 2025-11-11 00:02:50.813428 | centos-9-stream | +-w /etc/security/opasswd -k opasswd 2025-11-11 00:02:50.813431 | centos-9-stream | + 2025-11-11 00:02:50.813435 | centos-9-stream | +## Sudoers file changes 2025-11-11 00:02:50.813439 | centos-9-stream | +-w /etc/sudoers -p wa -k actions 2025-11-11 00:02:50.813443 | centos-9-stream | +-w /etc/sudoers.d/ -p wa -k actions 2025-11-11 00:02:50.813446 | centos-9-stream | + 2025-11-11 00:02:50.813450 | centos-9-stream | +## Passwd 2025-11-11 00:02:50.813454 | centos-9-stream | +-w /usr/bin/passwd -p x -k passwd_modification 2025-11-11 00:02:50.813458 | centos-9-stream | + 2025-11-11 00:02:50.813462 | centos-9-stream | +## Tools to change group identifiers 2025-11-11 00:02:50.813466 | centos-9-stream | +-w /usr/sbin/groupadd -p x -k group_modification 2025-11-11 00:02:50.813470 | centos-9-stream | +-w /usr/sbin/groupmod -p x -k group_modification 2025-11-11 00:02:50.813474 | centos-9-stream | +-w /usr/sbin/addgroup -p x -k group_modification 2025-11-11 00:02:50.813477 | centos-9-stream | +-w /usr/sbin/useradd -p x -k user_modification 2025-11-11 00:02:50.813494 | centos-9-stream | +-w /usr/sbin/userdel -p x -k user_modification 2025-11-11 00:02:50.813499 | centos-9-stream | +-w /usr/sbin/usermod -p x -k user_modification 2025-11-11 00:02:50.813502 | centos-9-stream | +-w /usr/sbin/adduser -p x -k user_modification 2025-11-11 00:02:50.813506 | centos-9-stream | + 2025-11-11 00:02:50.813510 | centos-9-stream | +## Login configuration and information 2025-11-11 00:02:50.813514 | centos-9-stream | +-w /etc/login.defs -p wa -k login 2025-11-11 00:02:50.813518 | centos-9-stream | +-w /etc/securetty -p wa -k login 2025-11-11 00:02:50.813521 | centos-9-stream | +-w /var/log/faillog -p wa -k login 2025-11-11 00:02:50.813532 | centos-9-stream | +-w /var/log/lastlog -p wa -k login 2025-11-11 00:02:50.813535 | centos-9-stream | +-w /var/log/tallylog -p wa -k login 2025-11-11 00:02:50.813539 | centos-9-stream | + 2025-11-11 00:02:50.813543 | centos-9-stream | +## Network Environment 2025-11-11 00:02:50.820251 | centos-9-stream | +### Changes to hostname 2025-11-11 00:02:50.820310 | centos-9-stream | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-11-11 00:02:50.820316 | centos-9-stream | + 2025-11-11 00:02:50.820321 | centos-9-stream | +### Detect Remote Shell Use 2025-11-11 00:02:50.820325 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:50.820330 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-11-11 00:02:50.820334 | centos-9-stream | + 2025-11-11 00:02:50.820338 | centos-9-stream | +### Successful IPv4 Connections 2025-11-11 00:02:50.820343 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-11-11 00:02:50.820346 | centos-9-stream | + 2025-11-11 00:02:50.820350 | centos-9-stream | +### Successful IPv6 Connections 2025-11-11 00:02:50.820354 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-11-11 00:02:50.820358 | centos-9-stream | + 2025-11-11 00:02:50.820362 | centos-9-stream | +### Changes to other files 2025-11-11 00:02:50.820366 | centos-9-stream | +-w /etc/hosts -p wa -k network_modifications 2025-11-11 00:02:50.820370 | centos-9-stream | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-11-11 00:02:50.820374 | centos-9-stream | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-11-11 00:02:50.820378 | centos-9-stream | +-w /etc/network/ -p wa -k network 2025-11-11 00:02:50.820382 | centos-9-stream | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-11-11 00:02:50.820387 | centos-9-stream | + 2025-11-11 00:02:50.820391 | centos-9-stream | +### Changes to issue 2025-11-11 00:02:50.820394 | centos-9-stream | +-w /etc/issue -p wa -k etcissue 2025-11-11 00:02:50.820398 | centos-9-stream | +-w /etc/issue.net -p wa -k etcissue 2025-11-11 00:02:50.820402 | centos-9-stream | + 2025-11-11 00:02:50.820406 | centos-9-stream | +## System startup scripts 2025-11-11 00:02:50.820410 | centos-9-stream | +-w /etc/inittab -p wa -k init 2025-11-11 00:02:50.820414 | centos-9-stream | +-w /etc/init.d/ -p wa -k init 2025-11-11 00:02:50.820418 | centos-9-stream | +-w /etc/init/ -p wa -k init 2025-11-11 00:02:50.820421 | centos-9-stream | + 2025-11-11 00:02:50.820425 | centos-9-stream | +## Library search paths 2025-11-11 00:02:50.820429 | centos-9-stream | +-w /etc/ld.so.conf -p wa -k libpath 2025-11-11 00:02:50.820433 | centos-9-stream | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-11-11 00:02:50.820436 | centos-9-stream | + 2025-11-11 00:02:50.820440 | centos-9-stream | +## Systemwide library preloads (LD_PRELOAD) 2025-11-11 00:02:50.820444 | centos-9-stream | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-11-11 00:02:50.820448 | centos-9-stream | + 2025-11-11 00:02:50.820452 | centos-9-stream | +## Pam configuration 2025-11-11 00:02:50.820455 | centos-9-stream | +-w /etc/pam.d/ -p wa -k pam 2025-11-11 00:02:50.820459 | centos-9-stream | +-w /etc/security/limits.conf -p wa -k pam 2025-11-11 00:02:50.820463 | centos-9-stream | +-w /etc/security/limits.d -p wa -k pam 2025-11-11 00:02:50.820467 | centos-9-stream | +-w /etc/security/pam_env.conf -p wa -k pam 2025-11-11 00:02:50.820470 | centos-9-stream | +-w /etc/security/namespace.conf -p wa -k pam 2025-11-11 00:02:50.820474 | centos-9-stream | +-w /etc/security/namespace.d -p wa -k pam 2025-11-11 00:02:50.820478 | centos-9-stream | +-w /etc/security/namespace.init -p wa -k pam 2025-11-11 00:02:50.820482 | centos-9-stream | + 2025-11-11 00:02:50.820485 | centos-9-stream | +## Mail configuration 2025-11-11 00:02:50.820489 | centos-9-stream | +-w /etc/aliases -p wa -k mail 2025-11-11 00:02:50.820493 | centos-9-stream | +-w /etc/postfix/ -p wa -k mail 2025-11-11 00:02:50.820497 | centos-9-stream | +-w /etc/exim4/ -p wa -k mail 2025-11-11 00:02:50.820500 | centos-9-stream | + 2025-11-11 00:02:50.820522 | centos-9-stream | +## SSH configuration 2025-11-11 00:02:50.820526 | centos-9-stream | +-w /etc/ssh/sshd_config -k sshd 2025-11-11 00:02:50.820530 | centos-9-stream | +-w /etc/ssh/sshd_config.d -k sshd 2025-11-11 00:02:50.820547 | centos-9-stream | + 2025-11-11 00:02:50.820551 | centos-9-stream | +## root ssh key tampering 2025-11-11 00:02:50.820554 | centos-9-stream | +-w /root/.ssh -p wa -k rootkey 2025-11-11 00:02:50.820558 | centos-9-stream | + 2025-11-11 00:02:50.820562 | centos-9-stream | +# Systemd 2025-11-11 00:02:50.820566 | centos-9-stream | +-w /bin/systemctl -p x -k systemd 2025-11-11 00:02:50.820570 | centos-9-stream | +-w /etc/systemd/ -p wa -k systemd 2025-11-11 00:02:50.820574 | centos-9-stream | +-w /usr/lib/systemd -p wa -k systemd 2025-11-11 00:02:50.820578 | centos-9-stream | + 2025-11-11 00:02:50.820582 | centos-9-stream | +## https://systemd.network/systemd.generator.html 2025-11-11 00:02:50.820586 | centos-9-stream | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:50.820596 | centos-9-stream | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:50.820600 | centos-9-stream | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-11-11 00:02:50.820604 | centos-9-stream | + 2025-11-11 00:02:50.820608 | centos-9-stream | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:50.820711 | centos-9-stream | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-11-11 00:02:50.820820 | centos-9-stream | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-11-11 00:02:50.820923 | centos-9-stream | + 2025-11-11 00:02:50.821032 | centos-9-stream | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-11-11 00:02:50.821150 | centos-9-stream | +-w /etc/selinux/ -p wa -k mac_policy 2025-11-11 00:02:50.821298 | centos-9-stream | + 2025-11-11 00:02:50.821359 | centos-9-stream | +## Critical elements access failures 2025-11-11 00:02:50.821475 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.821600 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.821724 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.821838 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.821954 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.822069 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.822208 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.822320 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-11-11 00:02:50.822427 | centos-9-stream | + 2025-11-11 00:02:50.822529 | centos-9-stream | +## Process ID change (switching accounts) applications 2025-11-11 00:02:50.822632 | centos-9-stream | +-w /bin/su -p x -k priv_esc 2025-11-11 00:02:50.822771 | centos-9-stream | +-w /usr/bin/sudo -p x -k priv_esc 2025-11-11 00:02:50.822874 | centos-9-stream | + 2025-11-11 00:02:50.822980 | centos-9-stream | +## Power state 2025-11-11 00:02:50.823087 | centos-9-stream | +-w /sbin/shutdown -p x -k power 2025-11-11 00:02:50.823214 | centos-9-stream | +-w /sbin/poweroff -p x -k power 2025-11-11 00:02:50.823318 | centos-9-stream | +-w /sbin/reboot -p x -k power 2025-11-11 00:02:50.823433 | centos-9-stream | +-w /sbin/halt -p x -k power 2025-11-11 00:02:50.823522 | centos-9-stream | + 2025-11-11 00:02:50.823633 | centos-9-stream | +## Session initiation information 2025-11-11 00:02:50.823752 | centos-9-stream | +-w /var/run/utmp -p wa -k session 2025-11-11 00:02:50.823857 | centos-9-stream | +-w /var/log/btmp -p wa -k session 2025-11-11 00:02:50.823964 | centos-9-stream | +-w /var/log/wtmp -p wa -k session 2025-11-11 00:02:50.824066 | centos-9-stream | + 2025-11-11 00:02:50.824188 | centos-9-stream | +## Discretionary Access Control (DAC) modifications 2025-11-11 00:02:50.824299 | centos-9-stream | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824407 | centos-9-stream | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824512 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824619 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824738 | centos-9-stream | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824849 | centos-9-stream | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.824963 | centos-9-stream | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825071 | centos-9-stream | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825203 | centos-9-stream | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825315 | centos-9-stream | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825423 | centos-9-stream | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825529 | centos-9-stream | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825642 | centos-9-stream | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-11-11 00:02:50.825750 | centos-9-stream | + 2025-11-11 00:02:50.825857 | centos-9-stream | +# Special Rules --------------------------------------------------------------- 2025-11-11 00:02:50.826148 | centos-9-stream | + 2025-11-11 00:02:50.826270 | centos-9-stream | +## Reconnaissance 2025-11-11 00:02:50.826376 | centos-9-stream | +-w /usr/bin/whoami -p x -k recon 2025-11-11 00:02:50.826488 | centos-9-stream | +-w /usr/bin/id -p x -k recon 2025-11-11 00:02:50.826594 | centos-9-stream | +-w /bin/hostname -p x -k recon 2025-11-11 00:02:50.826737 | centos-9-stream | +-w /bin/uname -p x -k recon 2025-11-11 00:02:50.826837 | centos-9-stream | +-w /etc/issue -p r -k recon 2025-11-11 00:02:50.826939 | centos-9-stream | +-w /etc/hostname -p r -k recon 2025-11-11 00:02:50.827043 | centos-9-stream | + 2025-11-11 00:02:50.827175 | centos-9-stream | +## Suspicious activity 2025-11-11 00:02:50.827279 | centos-9-stream | +-w /usr/bin/wget -p x -k susp_activity 2025-11-11 00:02:50.827385 | centos-9-stream | +-w /usr/bin/curl -p x -k susp_activity 2025-11-11 00:02:50.827489 | centos-9-stream | +-w /usr/bin/base64 -p x -k susp_activity 2025-11-11 00:02:50.827596 | centos-9-stream | +-w /bin/nc -p x -k susp_activity 2025-11-11 00:02:50.827717 | centos-9-stream | +-w /bin/netcat -p x -k susp_activity 2025-11-11 00:02:50.827831 | centos-9-stream | +-w /usr/bin/ncat -p x -k susp_activity 2025-11-11 00:02:50.827923 | centos-9-stream | +-w /usr/bin/ss -p x -k susp_activity 2025-11-11 00:02:50.828027 | centos-9-stream | +-w /usr/bin/netstat -p x -k susp_activity 2025-11-11 00:02:50.828148 | centos-9-stream | +-w /usr/bin/ssh -p x -k susp_activity 2025-11-11 00:02:50.828252 | centos-9-stream | +-w /usr/bin/scp -p x -k susp_activity 2025-11-11 00:02:50.828355 | centos-9-stream | +-w /usr/bin/sftp -p x -k susp_activity 2025-11-11 00:02:50.828457 | centos-9-stream | +-w /usr/bin/ftp -p x -k susp_activity 2025-11-11 00:02:50.828560 | centos-9-stream | +-w /usr/bin/socat -p x -k susp_activity 2025-11-11 00:02:50.828684 | centos-9-stream | +-w /usr/bin/wireshark -p x -k susp_activity 2025-11-11 00:02:50.828794 | centos-9-stream | +-w /usr/bin/tshark -p x -k susp_activity 2025-11-11 00:02:50.828929 | centos-9-stream | +-w /usr/bin/rawshark -p x -k susp_activity 2025-11-11 00:02:50.829013 | centos-9-stream | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:50.829137 | centos-9-stream | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-11-11 00:02:50.829240 | centos-9-stream | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-11-11 00:02:50.829344 | centos-9-stream | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:50.829450 | centos-9-stream | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-11-11 00:02:50.829554 | centos-9-stream | +-w /usr/bin/nmap -p x -k susp_activity 2025-11-11 00:02:50.829703 | centos-9-stream | + 2025-11-11 00:02:50.829774 | centos-9-stream | +## sssd 2025-11-11 00:02:50.829891 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.830020 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.830140 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.830259 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.830373 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.830473 | centos-9-stream | + 2025-11-11 00:02:50.830577 | centos-9-stream | +## T1002 Data Compressed 2025-11-11 00:02:50.830706 | centos-9-stream | + 2025-11-11 00:02:50.830816 | centos-9-stream | +-w /usr/bin/zip -p x -k Data_Compressed 2025-11-11 00:02:50.830922 | centos-9-stream | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-11-11 00:02:50.831031 | centos-9-stream | +-w /usr/bin/tar -p x -k Data_Compressed 2025-11-11 00:02:50.831152 | centos-9-stream | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-11-11 00:02:50.831255 | centos-9-stream | + 2025-11-11 00:02:50.831361 | centos-9-stream | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:50.831462 | centos-9-stream | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-11-11 00:02:50.831563 | centos-9-stream | + 2025-11-11 00:02:50.831685 | centos-9-stream | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:50.831784 | centos-9-stream | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-11-11 00:02:50.831883 | centos-9-stream | + 2025-11-11 00:02:50.831986 | centos-9-stream | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:50.832170 | centos-9-stream | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-11-11 00:02:50.832224 | centos-9-stream | + 2025-11-11 00:02:50.832329 | centos-9-stream | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:50.832435 | centos-9-stream | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-11-11 00:02:50.832529 | centos-9-stream | + 2025-11-11 00:02:50.832629 | centos-9-stream | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:50.832748 | centos-9-stream | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-11-11 00:02:50.832849 | centos-9-stream | + 2025-11-11 00:02:50.832952 | centos-9-stream | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:50.833057 | centos-9-stream | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-11-11 00:02:50.833266 | centos-9-stream | + 2025-11-11 00:02:50.833284 | centos-9-stream | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:50.833518 | centos-9-stream | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-11-11 00:02:50.833634 | centos-9-stream | + 2025-11-11 00:02:50.833783 | centos-9-stream | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:50.833891 | centos-9-stream | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-11-11 00:02:50.834006 | centos-9-stream | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:50.834129 | centos-9-stream | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-11-11 00:02:50.834240 | centos-9-stream | + 2025-11-11 00:02:50.834351 | centos-9-stream | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:50.834447 | centos-9-stream | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-11-11 00:02:50.834549 | centos-9-stream | + 2025-11-11 00:02:50.834652 | centos-9-stream | +## Added to catch netcat on Ubuntu 2025-11-11 00:02:50.834775 | centos-9-stream | +-w /bin/nc.openbsd -p x -k susp_activity 2025-11-11 00:02:50.834882 | centos-9-stream | +-w /bin/nc.traditional -p x -k susp_activity 2025-11-11 00:02:50.834983 | centos-9-stream | + 2025-11-11 00:02:50.835088 | centos-9-stream | +## Sbin suspicious activity 2025-11-11 00:02:50.835220 | centos-9-stream | +-w /sbin/iptables -p x -k sbin_susp 2025-11-11 00:02:50.835324 | centos-9-stream | +-w /sbin/ip6tables -p x -k sbin_susp 2025-11-11 00:02:50.835450 | centos-9-stream | +-w /sbin/ifconfig -p x -k sbin_susp 2025-11-11 00:02:50.835527 | centos-9-stream | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-11-11 00:02:50.835634 | centos-9-stream | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-11-11 00:02:50.835754 | centos-9-stream | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-11-11 00:02:50.835855 | centos-9-stream | +-w /usr/sbin/nft -p x -k sbin_susp 2025-11-11 00:02:50.835959 | centos-9-stream | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-11-11 00:02:50.836064 | centos-9-stream | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-11-11 00:02:50.836194 | centos-9-stream | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-11-11 00:02:50.836295 | centos-9-stream | + 2025-11-11 00:02:50.836398 | centos-9-stream | +### kde4 2025-11-11 00:02:50.836534 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.836629 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-11-11 00:02:50.836743 | centos-9-stream | + 2025-11-11 00:02:50.836846 | centos-9-stream | +## dbus-send invocation 2025-11-11 00:02:50.836952 | centos-9-stream | +### may indicate privilege escalation CVE-2021-3560 2025-11-11 00:02:50.837055 | centos-9-stream | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-11-11 00:02:50.837686 | centos-9-stream | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-11-11 00:02:50.837870 | centos-9-stream | + 2025-11-11 00:02:50.837987 | centos-9-stream | +## pkexec invocation 2025-11-11 00:02:50.838105 | centos-9-stream | +### may indicate privilege escalation CVE-2021-4034 2025-11-11 00:02:50.838239 | centos-9-stream | +-w /usr/bin/pkexec -p x -k pkexec 2025-11-11 00:02:50.838338 | centos-9-stream | + 2025-11-11 00:02:50.838442 | centos-9-stream | +## Suspicious shells 2025-11-11 00:02:50.838546 | centos-9-stream | +-w /bin/ash -p x -k susp_shell 2025-11-11 00:02:50.838650 | centos-9-stream | +-w /bin/csh -p x -k susp_shell 2025-11-11 00:02:50.838773 | centos-9-stream | +-w /bin/fish -p x -k susp_shell 2025-11-11 00:02:50.838878 | centos-9-stream | +-w /bin/tcsh -p x -k susp_shell 2025-11-11 00:02:50.838990 | centos-9-stream | +-w /bin/tclsh -p x -k susp_shell 2025-11-11 00:02:50.839098 | centos-9-stream | +-w /bin/xonsh -p x -k susp_shell 2025-11-11 00:02:50.839221 | centos-9-stream | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-11-11 00:02:50.839325 | centos-9-stream | +-w /bin/open -p x -k susp_shell 2025-11-11 00:02:50.839430 | centos-9-stream | +-w /bin/rbash -p x -k susp_shell 2025-11-11 00:02:50.839531 | centos-9-stream | + 2025-11-11 00:02:50.839636 | centos-9-stream | +# Web Server Actvity 2025-11-11 00:02:50.839765 | centos-9-stream | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-11-11 00:02:50.839874 | centos-9-stream | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-11-11 00:02:50.839975 | centos-9-stream | + 2025-11-11 00:02:50.840084 | centos-9-stream | +### https://clustershell.readthedocs.io/ 2025-11-11 00:02:50.840212 | centos-9-stream | +-w /bin/clush -p x -k susp_shell 2025-11-11 00:02:50.840317 | centos-9-stream | +-w /usr/local/bin/clush -p x -k susp_shell 2025-11-11 00:02:50.840421 | centos-9-stream | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-11-11 00:02:50.840519 | centos-9-stream | + 2025-11-11 00:02:50.840624 | centos-9-stream | +### https://github.com/tmux/tmux 2025-11-11 00:02:50.840748 | centos-9-stream | +-w /bin/tmux -p x -k susp_shell 2025-11-11 00:02:50.840845 | centos-9-stream | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-11-11 00:02:50.840951 | centos-9-stream | + 2025-11-11 00:02:50.841052 | centos-9-stream | +## Shell/profile configurations 2025-11-11 00:02:50.841171 | centos-9-stream | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-11-11 00:02:50.841274 | centos-9-stream | +-w /etc/profile -p wa -k shell_profiles 2025-11-11 00:02:50.841376 | centos-9-stream | +-w /etc/shells -p wa -k shell_profiles 2025-11-11 00:02:50.841480 | centos-9-stream | +-w /etc/bashrc -p wa -k shell_profiles 2025-11-11 00:02:50.841582 | centos-9-stream | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-11-11 00:02:50.841716 | centos-9-stream | +-w /etc/csh.login -p wa -k shell_profiles 2025-11-11 00:02:50.841823 | centos-9-stream | +-w /etc/fish/ -p wa -k shell_profiles 2025-11-11 00:02:50.841927 | centos-9-stream | +-w /etc/zsh/ -p wa -k shell_profiles 2025-11-11 00:02:50.842027 | centos-9-stream | + 2025-11-11 00:02:50.842163 | centos-9-stream | +### https://github.com/xxh/xxh 2025-11-11 00:02:50.842274 | centos-9-stream | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-11-11 00:02:50.842378 | centos-9-stream | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-11-11 00:02:50.842491 | centos-9-stream | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-11-11 00:02:50.842593 | centos-9-stream | + 2025-11-11 00:02:50.842712 | centos-9-stream | +## Injection 2025-11-11 00:02:50.842823 | centos-9-stream | +### These rules watch for code injection by the ptrace facility. 2025-11-11 00:02:50.842929 | centos-9-stream | +### This could indicate someone trying to do something bad or just debugging 2025-11-11 00:02:50.843084 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-11-11 00:02:50.843206 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-11-11 00:02:50.843305 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-11-11 00:02:50.843414 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-11-11 00:02:50.843514 | centos-9-stream | + 2025-11-11 00:02:50.843617 | centos-9-stream | +## Anonymous File Creation 2025-11-11 00:02:50.843758 | centos-9-stream | +### These rules watch the use of memfd_create 2025-11-11 00:02:50.843877 | centos-9-stream | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-11-11 00:02:50.843990 | centos-9-stream | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-11-11 00:02:50.844101 | centos-9-stream | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-11-11 00:02:50.844234 | centos-9-stream | + 2025-11-11 00:02:50.844342 | centos-9-stream | +## Privilege Abuse 2025-11-11 00:02:50.844457 | centos-9-stream | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-11-11 00:02:50.844576 | centos-9-stream | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-11-11 00:02:50.844689 | centos-9-stream | + 2025-11-11 00:02:50.844837 | centos-9-stream | +# Socket Creations 2025-11-11 00:02:50.844901 | centos-9-stream | +# will catch both IPv4 and IPv6 2025-11-11 00:02:50.845001 | centos-9-stream | + 2025-11-11 00:02:50.845143 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:50.845250 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-11-11 00:02:50.845327 | centos-9-stream | + 2025-11-11 00:02:50.845433 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:50.845537 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-11-11 00:02:50.845637 | centos-9-stream | + 2025-11-11 00:02:50.845833 | centos-9-stream | +# Software Management --------------------------------------------------------- 2025-11-11 00:02:50.845935 | centos-9-stream | + 2025-11-11 00:02:50.846040 | centos-9-stream | +# RPM (Redhat/CentOS) 2025-11-11 00:02:50.846179 | centos-9-stream | +-w /usr/bin/rpm -p x -k software_mgmt 2025-11-11 00:02:50.846284 | centos-9-stream | +-w /usr/bin/yum -p x -k software_mgmt 2025-11-11 00:02:50.846382 | centos-9-stream | + 2025-11-11 00:02:50.846487 | centos-9-stream | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-11-11 00:02:50.846597 | centos-9-stream | +-w /usr/bin/dnf -p x -k software_mgmt 2025-11-11 00:02:50.846726 | centos-9-stream | + 2025-11-11 00:02:50.846835 | centos-9-stream | +# YAST/Zypper/RPM (SuSE) 2025-11-11 00:02:50.846940 | centos-9-stream | +-w /sbin/yast -p x -k software_mgmt 2025-11-11 00:02:50.847044 | centos-9-stream | +-w /sbin/yast2 -p x -k software_mgmt 2025-11-11 00:02:50.847167 | centos-9-stream | +-w /bin/rpm -p x -k software_mgmt 2025-11-11 00:02:50.847275 | centos-9-stream | +-w /usr/bin/zypper -k software_mgmt 2025-11-11 00:02:50.847416 | centos-9-stream | + 2025-11-11 00:02:50.847478 | centos-9-stream | +# DPKG / APT-GET (Debian/Ubuntu) 2025-11-11 00:02:50.847593 | centos-9-stream | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-11-11 00:02:50.847700 | centos-9-stream | +-w /usr/bin/apt -p x -k software_mgmt 2025-11-11 00:02:50.847804 | centos-9-stream | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-11-11 00:02:50.847910 | centos-9-stream | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-11-11 00:02:50.848014 | centos-9-stream | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-11-11 00:02:50.848144 | centos-9-stream | +-w /usr/bin/wajig -p x -k software_mgmt 2025-11-11 00:02:50.848252 | centos-9-stream | +-w /usr/bin/snap -p x -k software_mgmt 2025-11-11 00:02:50.848354 | centos-9-stream | + 2025-11-11 00:02:50.848499 | centos-9-stream | +# PIP(3) (Python installs) 2025-11-11 00:02:50.848575 | centos-9-stream | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:50.848704 | centos-9-stream | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-11-11 00:02:50.848810 | centos-9-stream | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:50.848919 | centos-9-stream | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-11-11 00:02:50.849027 | centos-9-stream | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:50.849155 | centos-9-stream | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-11-11 00:02:50.849264 | centos-9-stream | + 2025-11-11 00:02:50.849378 | centos-9-stream | +# npm 2025-11-11 00:02:50.849477 | centos-9-stream | +## T1072 third party software 2025-11-11 00:02:50.849591 | centos-9-stream | +## https://www.npmjs.com 2025-11-11 00:02:50.849724 | centos-9-stream | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-11-11 00:02:50.849832 | centos-9-stream | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-11-11 00:02:50.849934 | centos-9-stream | + 2025-11-11 00:02:50.850042 | centos-9-stream | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-11-11 00:02:50.850174 | centos-9-stream | +## T1072 third party software 2025-11-11 00:02:50.850280 | centos-9-stream | +## https://www.cpan.org 2025-11-11 00:02:50.850385 | centos-9-stream | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-11-11 00:02:50.850487 | centos-9-stream | + 2025-11-11 00:02:50.850590 | centos-9-stream | +# Ruby (RubyGems installs) 2025-11-11 00:02:50.850711 | centos-9-stream | +## T1072 third party software 2025-11-11 00:02:50.850814 | centos-9-stream | +## https://rubygems.org 2025-11-11 00:02:50.850919 | centos-9-stream | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-11-11 00:02:50.851018 | centos-9-stream | + 2025-11-11 00:02:50.851143 | centos-9-stream | +# LuaRocks (Lua installs) 2025-11-11 00:02:50.851240 | centos-9-stream | +## T1072 third party software 2025-11-11 00:02:50.851341 | centos-9-stream | +## https://luarocks.org 2025-11-11 00:02:50.851448 | centos-9-stream | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-11-11 00:02:50.851551 | centos-9-stream | + 2025-11-11 00:02:50.851654 | centos-9-stream | +# Pacman (Arch Linux) 2025-11-11 00:02:50.851776 | centos-9-stream | +## https://wiki.archlinux.org/title/Pacman 2025-11-11 00:02:50.851881 | centos-9-stream | +## T1072 third party software 2025-11-11 00:02:50.851988 | centos-9-stream | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-11-11 00:02:50.852092 | centos-9-stream | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-11-11 00:02:50.852225 | centos-9-stream | + 2025-11-11 00:02:50.852335 | centos-9-stream | +# Special Software ------------------------------------------------------------ 2025-11-11 00:02:50.852432 | centos-9-stream | + 2025-11-11 00:02:50.852537 | centos-9-stream | +## GDS specific secrets 2025-11-11 00:02:50.852639 | centos-9-stream | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-11-11 00:02:50.852770 | centos-9-stream | + 2025-11-11 00:02:50.852878 | centos-9-stream | +## IBM Bigfix BESClient 2025-11-11 00:02:50.852997 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-11-11 00:02:50.853105 | centos-9-stream | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-11-11 00:02:50.853227 | centos-9-stream | + 2025-11-11 00:02:50.853346 | centos-9-stream | +## CHEF https://www.chef.io/chef/ 2025-11-11 00:02:50.853455 | centos-9-stream | +-w /etc/chef -p wa -k soft_chef 2025-11-11 00:02:50.853557 | centos-9-stream | + 2025-11-11 00:02:50.853685 | centos-9-stream | +## Salt 2025-11-11 00:02:50.853777 | centos-9-stream | +## https://saltproject.io/ 2025-11-11 00:02:50.853886 | centos-9-stream | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-11-11 00:02:50.853998 | centos-9-stream | +-w /etc/salt -p wa -k soft_salt 2025-11-11 00:02:50.854103 | centos-9-stream | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-11-11 00:02:50.854243 | centos-9-stream | + 2025-11-11 00:02:50.854345 | centos-9-stream | +## Otter 2025-11-11 00:02:50.854453 | centos-9-stream | +## https://inedo.com/otter 2025-11-11 00:02:50.854550 | centos-9-stream | +-w /etc/otter -p wa -k soft_otter 2025-11-11 00:02:50.854649 | centos-9-stream | + 2025-11-11 00:02:50.854778 | centos-9-stream | +## T1081 Credentials In Files 2025-11-11 00:02:50.854878 | centos-9-stream | +-w /usr/bin/grep -p x -k string_search 2025-11-11 00:02:50.854982 | centos-9-stream | +-w /usr/bin/egrep -p x -k string_search 2025-11-11 00:02:50.855086 | centos-9-stream | +-w /usr/bin/ugrep -p x -k string_search 2025-11-11 00:02:50.855207 | centos-9-stream | +### macOS 2025-11-11 00:02:50.855312 | centos-9-stream | +-w /usr/local/bin/grep -p x -k string_search 2025-11-11 00:02:50.855417 | centos-9-stream | +-w /usr/local/bin/egrep -p x -k string_search 2025-11-11 00:02:50.855520 | centos-9-stream | +-w /usr/local/bin/ugrep -p x -k string_search 2025-11-11 00:02:50.855620 | centos-9-stream | + 2025-11-11 00:02:50.855743 | centos-9-stream | +### https://github.com/tmbinc/bgrep 2025-11-11 00:02:50.855838 | centos-9-stream | +-w /usr/bin/bgrep -p x -k string_search 2025-11-11 00:02:50.855940 | centos-9-stream | +### macOS 2025-11-11 00:02:50.856045 | centos-9-stream | +-w /usr/local/bin/bgrep -p x -k string_search 2025-11-11 00:02:50.856173 | centos-9-stream | + 2025-11-11 00:02:50.856282 | centos-9-stream | +### https://github.com/BurntSushi/ripgrep 2025-11-11 00:02:50.856388 | centos-9-stream | +-w /usr/bin/rg -p x -k string_search 2025-11-11 00:02:50.856491 | centos-9-stream | +### macOS 2025-11-11 00:02:50.856592 | centos-9-stream | +-w /usr/local/bin/rg -p x -k string_search 2025-11-11 00:02:50.856720 | centos-9-stream | + 2025-11-11 00:02:50.856826 | centos-9-stream | +### https://github.com/awgn/cgrep 2025-11-11 00:02:50.856931 | centos-9-stream | + 2025-11-11 00:02:50.857037 | centos-9-stream | +-w /usr/bin/cgrep -p x -k string_search 2025-11-11 00:02:50.857156 | centos-9-stream | +### macOS 2025-11-11 00:02:50.857260 | centos-9-stream | +-w /usr/local/bin/cgrep -p x -k string_search 2025-11-11 00:02:50.857360 | centos-9-stream | + 2025-11-11 00:02:50.857464 | centos-9-stream | +### https://github.com/jpr5/ngrep 2025-11-11 00:02:50.857578 | centos-9-stream | +-w /usr/bin/ngrep -p x -k string_search 2025-11-11 00:02:50.857708 | centos-9-stream | +### macOS 2025-11-11 00:02:50.857801 | centos-9-stream | +-w /usr/local/bin/ngrep -p x -k string_search 2025-11-11 00:02:50.857905 | centos-9-stream | + 2025-11-11 00:02:50.858017 | centos-9-stream | +### https://github.com/vrothberg/vgrep 2025-11-11 00:02:50.858145 | centos-9-stream | +-w /usr/bin/vgrep -p x -k string_search 2025-11-11 00:02:50.858247 | centos-9-stream | +### macOS 2025-11-11 00:02:50.858356 | centos-9-stream | +-w /usr/local/bin/vgrep -p x -k string_search 2025-11-11 00:02:50.858455 | centos-9-stream | + 2025-11-11 00:02:50.858563 | centos-9-stream | +### https://github.com/monochromegane/the_platinum_searcher 2025-11-11 00:02:50.858682 | centos-9-stream | +-w /usr/bin/pt -p x -k string_search 2025-11-11 00:02:50.858780 | centos-9-stream | +### macOS 2025-11-11 00:02:50.858888 | centos-9-stream | +-w /usr/local/bin/pt -p x -k string_search 2025-11-11 00:02:50.858992 | centos-9-stream | + 2025-11-11 00:02:50.859099 | centos-9-stream | +### https://github.com/gvansickle/ucg 2025-11-11 00:02:50.859222 | centos-9-stream | +-w /usr/bin/ucg -p x -k string_search 2025-11-11 00:02:50.859324 | centos-9-stream | +### macOS 2025-11-11 00:02:50.859435 | centos-9-stream | +-w /usr/local/bin/ucg -p x -k string_search 2025-11-11 00:02:50.859537 | centos-9-stream | + 2025-11-11 00:02:50.859643 | centos-9-stream | +### https://github.com/ggreer/the_silver_searcher 2025-11-11 00:02:50.859777 | centos-9-stream | +-w /usr/bin/ag -p x -k string_search 2025-11-11 00:02:50.859883 | centos-9-stream | +### macOS 2025-11-11 00:02:50.860214 | centos-9-stream | +-w /usr/local/bin/ag -p x -k string_search 2025-11-11 00:02:50.860344 | centos-9-stream | + 2025-11-11 00:02:50.860502 | centos-9-stream | +### https://github.com/beyondgrep/ack3 2025-11-11 00:02:50.860558 | centos-9-stream | +### https://beyondgrep.com 2025-11-11 00:02:50.860686 | centos-9-stream | +-w /usr/bin/ack -p x -k string_search 2025-11-11 00:02:50.860779 | centos-9-stream | +-w /usr/local/bin/ack -p x -k string_search 2025-11-11 00:02:50.860883 | centos-9-stream | +-w /usr/bin/semgrep -p x -k string_search 2025-11-11 00:02:50.860987 | centos-9-stream | +### macOS 2025-11-11 00:02:50.861091 | centos-9-stream | +-w /usr/local/bin/semgrep -p x -k string_search 2025-11-11 00:02:50.861211 | centos-9-stream | + 2025-11-11 00:02:50.861316 | centos-9-stream | +## Docker 2025-11-11 00:02:50.861420 | centos-9-stream | +-w /usr/bin/dockerd -k docker 2025-11-11 00:02:50.861522 | centos-9-stream | +-w /usr/bin/docker -k docker 2025-11-11 00:02:50.861628 | centos-9-stream | +-w /usr/bin/docker-containerd -k docker 2025-11-11 00:02:50.861769 | centos-9-stream | +-w /usr/bin/docker-runc -k docker 2025-11-11 00:02:50.861867 | centos-9-stream | +-w /var/lib/docker -p wa -k docker 2025-11-11 00:02:50.861970 | centos-9-stream | +-w /etc/docker -k docker 2025-11-11 00:02:50.862074 | centos-9-stream | +-w /etc/sysconfig/docker -k docker 2025-11-11 00:02:50.862196 | centos-9-stream | +-w /etc/sysconfig/docker-storage -k docker 2025-11-11 00:02:50.862299 | centos-9-stream | +-w /usr/lib/systemd/system/docker.service -k docker 2025-11-11 00:02:50.862413 | centos-9-stream | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-11-11 00:02:50.862512 | centos-9-stream | + 2025-11-11 00:02:50.862704 | centos-9-stream | +## Virtualization stuff 2025-11-11 00:02:50.862741 | centos-9-stream | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-11-11 00:02:50.862854 | centos-9-stream | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-11-11 00:02:50.862966 | centos-9-stream | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-11-11 00:02:50.863061 | centos-9-stream | +-w /usr/bin/qemu -p x -k qemu 2025-11-11 00:02:50.863188 | centos-9-stream | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-11-11 00:02:50.863293 | centos-9-stream | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-11-11 00:02:50.863396 | centos-9-stream | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-11-11 00:02:50.863496 | centos-9-stream | + 2025-11-11 00:02:50.863601 | centos-9-stream | +#### VirtualBox on macOS 2025-11-11 00:02:50.863728 | centos-9-stream | + 2025-11-11 00:02:50.863837 | centos-9-stream | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-11-11 00:02:50.863939 | centos-9-stream | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-11-11 00:02:50.864046 | centos-9-stream | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-11-11 00:02:50.864175 | centos-9-stream | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-11-11 00:02:50.864275 | centos-9-stream | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-11-11 00:02:50.864384 | centos-9-stream | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-11-11 00:02:50.864489 | centos-9-stream | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-11-11 00:02:50.864594 | centos-9-stream | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-11-11 00:02:50.864710 | centos-9-stream | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-11-11 00:02:50.864813 | centos-9-stream | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-11-11 00:02:50.864922 | centos-9-stream | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-11-11 00:02:50.865031 | centos-9-stream | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-11-11 00:02:50.865177 | centos-9-stream | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-11-11 00:02:50.865280 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-11-11 00:02:50.865388 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-11-11 00:02:50.865497 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-11-11 00:02:50.865604 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-11-11 00:02:50.865717 | centos-9-stream | + 2025-11-11 00:02:50.865825 | centos-9-stream | +### Parallels Desktop on macOS 2025-11-11 00:02:50.865980 | centos-9-stream | + 2025-11-11 00:02:50.866031 | centos-9-stream | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-11-11 00:02:50.866156 | centos-9-stream | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-11-11 00:02:50.866268 | centos-9-stream | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-11-11 00:02:50.866374 | centos-9-stream | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-11-11 00:02:50.866476 | centos-9-stream | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-11-11 00:02:50.866579 | centos-9-stream | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-11-11 00:02:50.866704 | centos-9-stream | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-11-11 00:02:50.866800 | centos-9-stream | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-11-11 00:02:50.866901 | centos-9-stream | + 2025-11-11 00:02:50.867002 | centos-9-stream | +### qemu on macOS 2025-11-11 00:02:50.867102 | centos-9-stream | + 2025-11-11 00:02:50.867227 | centos-9-stream | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-11-11 00:02:50.867332 | centos-9-stream | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-11-11 00:02:50.867436 | centos-9-stream | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-11-11 00:02:50.867542 | centos-9-stream | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-11-11 00:02:50.867645 | centos-9-stream | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-11-11 00:02:50.867778 | centos-9-stream | + 2025-11-11 00:02:50.868074 | centos-9-stream | +## Kubelet 2025-11-11 00:02:50.868231 | centos-9-stream | +-w /usr/bin/kubelet -k kubelet 2025-11-11 00:02:50.868330 | centos-9-stream | + 2025-11-11 00:02:50.868434 | centos-9-stream | +# ipc system call 2025-11-11 00:02:50.868537 | centos-9-stream | +# /usr/include/linux/ipc.h 2025-11-11 00:02:50.868636 | centos-9-stream | + 2025-11-11 00:02:50.868755 | centos-9-stream | +## msgctl 2025-11-11 00:02:50.868864 | centos-9-stream | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-11-11 00:02:50.868962 | centos-9-stream | +## msgget 2025-11-11 00:02:50.869070 | centos-9-stream | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-11-11 00:02:50.869199 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:50.869310 | centos-9-stream | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-11-11 00:02:50.869417 | centos-9-stream | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-11-11 00:02:50.869520 | centos-9-stream | + 2025-11-11 00:02:50.869621 | centos-9-stream | +## semctl 2025-11-11 00:02:50.869762 | centos-9-stream | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-11-11 00:02:50.869865 | centos-9-stream | +## semget 2025-11-11 00:02:50.869972 | centos-9-stream | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-11-11 00:02:50.870076 | centos-9-stream | +## semop 2025-11-11 00:02:50.870211 | centos-9-stream | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-11-11 00:02:50.870345 | centos-9-stream | +## semtimedop 2025-11-11 00:02:50.870426 | centos-9-stream | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-11-11 00:02:50.870549 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:50.870634 | centos-9-stream | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-11-11 00:02:50.870755 | centos-9-stream | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-11-11 00:02:50.870862 | centos-9-stream | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-11-11 00:02:50.870968 | centos-9-stream | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-11-11 00:02:50.871071 | centos-9-stream | + 2025-11-11 00:02:50.871199 | centos-9-stream | +## shmctl 2025-11-11 00:02:50.871308 | centos-9-stream | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-11-11 00:02:50.871436 | centos-9-stream | +## shmget 2025-11-11 00:02:50.871515 | centos-9-stream | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-11-11 00:02:50.871620 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-11-11 00:02:50.871742 | centos-9-stream | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-11-11 00:02:50.871847 | centos-9-stream | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-11-11 00:02:50.871948 | centos-9-stream | + 2025-11-11 00:02:50.872053 | centos-9-stream | +# High Volume Events ---------------------------------------------------------- 2025-11-11 00:02:50.872193 | centos-9-stream | + 2025-11-11 00:02:50.872286 | centos-9-stream | +## Disable these rules if they create too many events in your environment 2025-11-11 00:02:50.872385 | centos-9-stream | + 2025-11-11 00:02:50.872522 | centos-9-stream | +## Common Shells 2025-11-11 00:02:50.872591 | centos-9-stream | +-w /bin/bash -p x -k susp_shell 2025-11-11 00:02:50.872743 | centos-9-stream | +-w /bin/dash -p x -k susp_shell 2025-11-11 00:02:50.872850 | centos-9-stream | +-w /bin/busybox -p x -k susp_shell 2025-11-11 00:02:50.872952 | centos-9-stream | +-w /bin/zsh -p x -k susp_shell 2025-11-11 00:02:50.873053 | centos-9-stream | +-w /bin/sh -p x -k susp_shell 2025-11-11 00:02:50.873182 | centos-9-stream | +-w /bin/ksh -p x -k susp_shell 2025-11-11 00:02:50.873283 | centos-9-stream | + 2025-11-11 00:02:50.873386 | centos-9-stream | +## Root command executions 2025-11-11 00:02:50.873500 | centos-9-stream | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-11-11 00:02:50.873607 | centos-9-stream | + 2025-11-11 00:02:50.873712 | centos-9-stream | +## File Deletion Events by User 2025-11-11 00:02:50.873826 | centos-9-stream | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-11-11 00:02:50.873923 | centos-9-stream | + 2025-11-11 00:02:50.874025 | centos-9-stream | +## File Access 2025-11-11 00:02:50.874160 | centos-9-stream | +### Unauthorized Access (unsuccessful) 2025-11-11 00:02:50.874272 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:50.874385 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-11-11 00:02:50.874484 | centos-9-stream | + 2025-11-11 00:02:50.874585 | centos-9-stream | +### Unsuccessful Creation 2025-11-11 00:02:50.874727 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-11-11 00:02:50.874836 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-11-11 00:02:50.874933 | centos-9-stream | + 2025-11-11 00:02:50.875038 | centos-9-stream | +### Unsuccessful Modification 2025-11-11 00:02:50.875178 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-11-11 00:02:50.875294 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-11-11 00:02:50.875392 | centos-9-stream | + 2025-11-11 00:02:50.875498 | centos-9-stream | +## 32bit API Exploitation 2025-11-11 00:02:50.875602 | centos-9-stream | +### If you are on a 64 bit platform, everything _should_ be running 2025-11-11 00:02:50.875727 | centos-9-stream | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-11-11 00:02:50.875831 | centos-9-stream | +### because this might be a sign of someone exploiting a hole in the 32 2025-11-11 00:02:50.875931 | centos-9-stream | +### bit API. 2025-11-11 00:02:50.876033 | centos-9-stream | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-11-11 00:02:50.876162 | centos-9-stream | + 2025-11-11 00:02:50.876265 | centos-9-stream | +# Make The Configuration Immutable -------------------------------------------- 2025-11-11 00:02:50.876361 | centos-9-stream | + 2025-11-11 00:02:50.876458 | centos-9-stream | +##-e 2 2025-11-11 00:02:50.876554 | centos-9-stream | 2025-11-11 00:02:50.876807 | centos-9-stream | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1762819369.5509577-2134-45678065236898/.source.rules", "state": "file", "uid": 0} 2025-11-11 00:02:50.876900 | centos-9-stream | 2025-11-11 00:02:50.877009 | centos-9-stream | TASK [auditd : Manage auditd service] ****************************************** 2025-11-11 00:02:51.226337 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-11-11 00:02:51.226485 | debian-bookworm | --- before 2025-11-11 00:02:51.226685 | debian-bookworm | +++ after 2025-11-11 00:02:51.226818 | debian-bookworm | @@ -1,4 +1,4 @@ 2025-11-11 00:02:51.226959 | debian-bookworm | { 2025-11-11 00:02:51.227109 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2025-11-11 00:02:51.227285 | debian-bookworm | - "state": "file" 2025-11-11 00:02:51.227457 | debian-bookworm | + "state": "absent" 2025-11-11 00:02:51.227660 | debian-bookworm | } 2025-11-11 00:02:51.227827 | debian-bookworm | 2025-11-11 00:02:51.228038 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-11-11 00:02:51.228168 | debian-bookworm | 2025-11-11 00:02:51.228316 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:51.473783 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ActiveEnterTimestampMonotonic": "4155851", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2025-11-10 23:57:35 UTC", "AssertTimestampMonotonic": "4003277", "Before": "sysinit.target crond.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "75268000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ConditionTimestampMonotonic": "4003240", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "514", "ExecMainStartTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ExecMainStartTimestampMonotonic": "4090223", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2025-11-10 23:57:35 UTC", "InactiveExitTimestampMonotonic": "4007393", "InvocationID": "e807e93b525d4d318f2a4ea0f488e9c5", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "514", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "5140480", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "7852032", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2025-11-10 23:57:35 UTC", "StateChangeTimestampMonotonic": "4155851", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24746", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:51.479731 | centos-9-stream | 2025-11-11 00:02:51.479819 | centos-9-stream | TASK [auditd : List existing rules files] ************************************** 2025-11-11 00:02:52.049362 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ActiveEnterTimestampMonotonic": "300027096", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket system.slice local-fs.target systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:41 UTC", "AssertTimestampMonotonic": "299947203", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "53696000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ConditionTimestampMonotonic": "299947159", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3289", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2311", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:41 UTC", "ExecMainStartTimestampMonotonic": "299996328", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2310 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2310 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2314 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:41 UTC] ; stop_time=[Tue 2025-11-11 00:02:41 UTC] ; pid=2314 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:41 UTC", "InactiveExitTimestampMonotonic": "299977267", "InvocationID": "44f6e3d98424441caf4d6834d89f7d16", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2311", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:41 UTC", "StateChangeTimestampMonotonic": "300027096", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:52.054448 | debian-bookworm | 2025-11-11 00:02:52.054857 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-11-11 00:02:52.152973 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.005895", "end": "2025-11-11 00:02:52.070382", "msg": "", "rc": 0, "start": "2025-11-11 00:02:52.064487", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2025-11-11 00:02:52.153072 | centos-9-stream | 2025-11-11 00:02:52.153179 | centos-9-stream | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-11-11 00:02:52.680073 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.125382", "end": "2025-11-11 00:02:52.588286", "msg": "", "rc": 0, "start": "2025-11-11 00:02:52.462904", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2702\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 62\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2702\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 52\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2702", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 62", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2702", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 52", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-11-11 00:02:52.680157 | debian-bookworm | 2025-11-11 00:02:52.680193 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:52.644549 | centos-9-stream | --- before 2025-11-11 00:02:52.644806 | centos-9-stream | +++ after 2025-11-11 00:02:52.645049 | centos-9-stream | @@ -1,4 +1,4 @@ 2025-11-11 00:02:52.645311 | centos-9-stream | { 2025-11-11 00:02:52.645553 | centos-9-stream | "path": "/etc/audit/rules.d/audit.rules", 2025-11-11 00:02:52.645834 | centos-9-stream | - "state": "file" 2025-11-11 00:02:52.646065 | centos-9-stream | + "state": "absent" 2025-11-11 00:02:52.646317 | centos-9-stream | } 2025-11-11 00:02:52.646537 | centos-9-stream | 2025-11-11 00:02:52.646871 | centos-9-stream | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-11-11 00:02:52.647179 | centos-9-stream | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-11-11 00:02:52.647399 | centos-9-stream | 2025-11-11 00:02:52.647639 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:53.702774 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-11-11 00:02:51 UTC", "ActiveEnterTimestampMonotonic": "310829006", "ActiveExitTimestamp": "Tue 2025-11-11 00:02:51 UTC", "ActiveExitTimestampMonotonic": "310670719", "ActiveState": "active", "After": "systemd-journald.socket system.slice local-fs.target systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:51 UTC", "AssertTimestampMonotonic": "310709115", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "177585000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:51 UTC", "ConditionTimestampMonotonic": "310709077", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3328", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2702", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:51 UTC", "ExecMainStartTimestampMonotonic": "310746321", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:51 UTC] ; stop_time=[Tue 2025-11-11 00:02:51 UTC] ; pid=2701 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:51 UTC] ; stop_time=[Tue 2025-11-11 00:02:51 UTC] ; pid=2701 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:51 UTC] ; stop_time=[Tue 2025-11-11 00:02:51 UTC] ; pid=2705 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:51 UTC] ; stop_time=[Tue 2025-11-11 00:02:51 UTC] ; pid=2705 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-11-11 00:02:51 UTC", "InactiveEnterTimestampMonotonic": "310708473", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:51 UTC", "InactiveExitTimestampMonotonic": "310728780", "InvocationID": "7e4698f12a6a4b6c93f1906e1adb76a1", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2702", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2068480", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:51 UTC", "StateChangeTimestampMonotonic": "310829006", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:53.703697 | debian-bookworm | 2025-11-11 00:02:53.703806 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-11-11 00:02:53.703930 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:53.704028 | debian-bookworm | 2025-11-11 00:02:53.524589 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ActiveEnterTimestampMonotonic": "4155851", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2025-11-10 23:57:35 UTC", "AssertTimestampMonotonic": "4003277", "Before": "sysinit.target crond.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "76573000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ConditionTimestampMonotonic": "4003240", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "514", "ExecMainStartTimestamp": "Mon 2025-11-10 23:57:35 UTC", "ExecMainStartTimestampMonotonic": "4090223", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2025-11-10 23:57:35 UTC", "InactiveExitTimestampMonotonic": "4007393", "InvocationID": "e807e93b525d4d318f2a4ea0f488e9c5", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "514", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "5136384", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "7852032", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2025-11-10 23:57:35 UTC", "StateChangeTimestampMonotonic": "4155851", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24746", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:53.529892 | centos-9-stream | 2025-11-11 00:02:53.529965 | centos-9-stream | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-11-11 00:02:53.863132 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2025-11-11 00:02:53.863893 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:54.165309 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.117473", "end": "2025-11-11 00:02:54.083904", "msg": "", "rc": 0, "start": "2025-11-11 00:02:53.966431", "stderr": "Old style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 26 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower", "stderr_lines": ["Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 26 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower"], "stdout": "/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2238\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 164\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2238\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 0\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2238", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 164", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2238", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 0", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-11-11 00:02:54.177984 | centos-9-stream | 2025-11-11 00:02:54.178311 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-11-11 00:02:55.125496 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Tue 2025-11-11 00:02:53 UTC", "ActiveEnterTimestampMonotonic": "320903976", "ActiveExitTimestamp": "Tue 2025-11-11 00:02:53 UTC", "ActiveExitTimestampMonotonic": "320722773", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-11-11 00:02:53 UTC", "AssertTimestampMonotonic": "320769740", "Before": "sysinit.target crond.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "196873000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-11-11 00:02:53 UTC", "ConditionTimestampMonotonic": "320769642", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "4108", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2238", "ExecMainStartTimestamp": "Tue 2025-11-11 00:02:53 UTC", "ExecMainStartTimestampMonotonic": "320793829", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-11-11 00:02:53 UTC] ; stop_time=[Tue 2025-11-11 00:02:53 UTC] ; pid=2237 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-11-11 00:02:53 UTC] ; stop_time=[Tue 2025-11-11 00:02:53 UTC] ; pid=2237 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-11-11 00:02:53 UTC] ; stop_time=[Tue 2025-11-11 00:02:53 UTC] ; pid=2241 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-11-11 00:02:53 UTC] ; stop_time=[Tue 2025-11-11 00:02:53 UTC] ; pid=2241 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-11-11 00:02:53 UTC", "InactiveEnterTimestampMonotonic": "320765300", "InactiveExitTimestamp": "Tue 2025-11-11 00:02:53 UTC", "InactiveExitTimestampMonotonic": "320782967", "InvocationID": "18f0d2e56b564682a989590fed1860b7", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2238", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2650112", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "4374528", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-11-11 00:02:53 UTC", "StateChangeTimestampMonotonic": "320903976", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24746", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-11-11 00:02:55.128489 | centos-9-stream | 2025-11-11 00:02:55.128630 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-11-11 00:02:55.128841 | centos-9-stream | molecule-auditd : ok=17 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-11-11 00:02:55.129000 | centos-9-stream | 2025-11-11 00:02:55.361918 | centos-9-stream | INFO [delegated > converge] Executed: Successful 2025-11-11 00:02:55.363274 | centos-9-stream | WARNING Molecule executed 1 scenario (1 missing files) 2025-11-11 00:02:55.899735 | ubuntu-jammy | ok: Runtime: 0:00:18.202628 2025-11-11 00:02:55.932269 | ubuntu-noble | ok: Runtime: 0:00:19.735368 2025-11-11 00:02:55.950508 | debian-bookworm | ok: Runtime: 0:00:23.156343 2025-11-11 00:02:55.966934 | centos-9-stream | ok: Runtime: 0:00:24.650815 2025-11-11 00:02:55.985458 | 2025-11-11 00:02:55.985554 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2025-11-11 00:02:56.619745 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:56.629455 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:56.699917 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:56.708703 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:56.589966 | ubuntu-jammy | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:56.598384 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:56.986356 | ubuntu-jammy | :1: SyntaxWarning: invalid decimal literal 2025-11-11 00:02:56.796863 | centos-9-stream | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2025-11-11 00:02:56.813540 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:57.225491 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:57.226175 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:57.238561 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:57.238655 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:57.238903 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2025-11-11 00:02:57.239062 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:57.308764 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:57.308794 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:57.319407 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:57.319542 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:57.319808 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2025-11-11 00:02:57.319932 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:57.113146 | ubuntu-jammy | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:57.113743 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:57.123289 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:57.123342 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:57.123546 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: verify 2025-11-11 00:02:57.123663 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:57.425797 | centos-9-stream | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2025-11-11 00:02:57.426488 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-11-11 00:02:57.439886 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-11-11 00:02:57.439963 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-11-11 00:02:57.440190 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: verify 2025-11-11 00:02:57.440341 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-11-11 00:02:58.551533 | ubuntu-jammy | INFO [delegated > verify] Executing 2025-11-11 00:02:58.553140 | ubuntu-jammy | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-11-11 00:02:58.554179 | ubuntu-jammy | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:58.554189 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:58.554196 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:58.554203 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:58.554209 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:58.554215 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-11-11 00:02:58.554221 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:58.554227 | ubuntu-jammy | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:58.554233 | ubuntu-jammy | 2025-11-11 00:02:58.554372 | ubuntu-jammy | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:58.554382 | ubuntu-jammy | MOLECULE_DEBUG: True 2025-11-11 00:02:58.554388 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:58.554393 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:58.554399 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:58.554405 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:58.554411 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:58.554417 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:58.554422 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:58.554428 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:58.554434 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:58.554440 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:58.554446 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:58.554452 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:58.554457 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:58.554463 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.554469 | ubuntu-jammy | 2025-11-11 00:02:58.554484 | ubuntu-jammy | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.836948 | debian-bookworm | INFO [delegated > verify] Executing 2025-11-11 00:02:58.838717 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-11-11 00:02:58.840200 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:58.840229 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:58.840237 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:58.840243 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:58.840249 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:58.840254 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-11-11 00:02:58.840259 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:58.840265 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:58.840270 | debian-bookworm | 2025-11-11 00:02:58.840438 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:58.840448 | debian-bookworm | MOLECULE_DEBUG: True 2025-11-11 00:02:58.840456 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:58.840464 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:58.840472 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:58.840480 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:58.840488 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:58.840494 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:58.840499 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:58.840504 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:58.840509 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:58.840514 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:58.840519 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:58.840524 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:58.840530 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:58.840535 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.840540 | debian-bookworm | 2025-11-11 00:02:58.840569 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.836526 | ubuntu-noble | INFO [delegated > verify] Executing 2025-11-11 00:02:58.838494 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-11-11 00:02:58.840289 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:58.840312 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:58.840320 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:58.840327 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:58.840333 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:58.840339 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-11-11 00:02:58.840345 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:58.840351 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:58.840357 | ubuntu-noble | 2025-11-11 00:02:58.840568 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:58.840579 | ubuntu-noble | MOLECULE_DEBUG: True 2025-11-11 00:02:58.840586 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:58.840591 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:58.840598 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:58.840603 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:58.840609 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:58.840616 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:58.840622 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:58.840628 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:58.840633 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:58.840639 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:58.840645 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:58.840651 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:58.840656 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:58.840662 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.840668 | ubuntu-noble | 2025-11-11 00:02:58.840820 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:58.748236 | ubuntu-jammy | writing pytest debug information to pytestdebug.log 2025-11-11 00:02:58.758917 | ubuntu-jammy | ============================= test session starts ============================== 2025-11-11 00:02:58.759458 | ubuntu-jammy | platform linux -- Python 3.11.0rc1, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-11-11 00:02:58.759845 | ubuntu-jammy | using: pytest-8.4.2 2025-11-11 00:02:58.760200 | ubuntu-jammy | registered third-party plugins: 2025-11-11 00:02:58.760574 | ubuntu-jammy | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-11-11 00:02:58.760954 | ubuntu-jammy | rootdir: /home/zuul 2025-11-11 00:02:58.761772 | ubuntu-jammy | plugins: testinfra-10.2.2 2025-11-11 00:02:59.062645 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.062794 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.062876 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.062997 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063127 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063280 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063462 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063570 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.10.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063689 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063858 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.063974 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064086 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.41.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.41.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064217 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064325 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064477 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064621 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064776 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.064895 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065012 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065178 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065316 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065511 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065703 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065868 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.065993 | centos-9-stream | WARNING Another version of 'community.dns' 3.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.066129 | centos-9-stream | WARNING Another version of 'community.docker' 4.8.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.8.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.066341 | centos-9-stream | WARNING Another version of 'community.general' 11.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.066614 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.067055 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.067498 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.067975 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.068416 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.068890 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069037 | centos-9-stream | WARNING Another version of 'community.mysql' 3.16.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.16.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069252 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069506 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069569 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069625 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069826 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.069930 | centos-9-stream | WARNING Another version of 'community.routeros' 3.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070043 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.145255 | debian-bookworm | writing pytest debug information to pytestdebug.log 2025-11-11 00:02:59.162908 | debian-bookworm | ============================= test session starts ============================== 2025-11-11 00:02:59.163469 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-11-11 00:02:59.164076 | debian-bookworm | using: pytest-8.4.2 2025-11-11 00:02:59.164530 | debian-bookworm | registered third-party plugins: 2025-11-11 00:02:59.164928 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-11-11 00:02:59.165467 | debian-bookworm | rootdir: /home/zuul 2025-11-11 00:02:59.165914 | debian-bookworm | plugins: testinfra-10.2.2 2025-11-11 00:02:59.071187 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2025-11-11 00:02:59.083768 | ubuntu-noble | ============================= test session starts ============================== 2025-11-11 00:02:59.084322 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-11-11 00:02:59.084798 | ubuntu-noble | using: pytest-8.4.2 2025-11-11 00:02:59.086362 | ubuntu-noble | registered third-party plugins: 2025-11-11 00:02:59.086396 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2025-11-11 00:02:59.086410 | ubuntu-noble | rootdir: /home/zuul 2025-11-11 00:02:59.086424 | ubuntu-noble | plugins: testinfra-10.2.2 2025-11-11 00:02:59.070335 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070348 | centos-9-stream | WARNING Another version of 'community.vmware' 5.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070415 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070634 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070768 | centos-9-stream | WARNING Another version of 'containers.podman' 1.18.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.18.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.070897 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.8 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.8 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071001 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.36 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.36 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071124 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071288 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071383 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071509 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071639 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.071919 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072083 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072244 | centos-9-stream | WARNING Another version of 'google.cloud' 1.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072357 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.6 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.6 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072446 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072542 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072641 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_object' 1.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072777 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072868 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.072972 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073152 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073260 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073398 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073510 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073609 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073766 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073860 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.073957 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074096 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074243 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074354 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074441 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074523 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074606 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074731 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074843 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.074941 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075026 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075102 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075209 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.22.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.22.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075322 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075420 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075504 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075626 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075793 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075877 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.075960 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.076041 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.076137 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-11-11 00:02:59.092957 | centos-9-stream | INFO [delegated > verify] Executing 2025-11-11 00:02:59.095167 | centos-9-stream | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-11-11 00:02:59.096803 | centos-9-stream | DEBUG ANSIBLE ENVIRONMENT: 2025-11-11 00:02:59.096836 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-11-11 00:02:59.096846 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-11-11 00:02:59.096855 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-11-11 00:02:59.096863 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-11-11 00:02:59.096872 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-11-11 00:02:59.096880 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-11-11 00:02:59.096887 | centos-9-stream | ANSIBLE_VERBOSITY: 1 2025-11-11 00:02:59.096895 | centos-9-stream | 2025-11-11 00:02:59.096999 | centos-9-stream | DEBUG MOLECULE ENVIRONMENT: 2025-11-11 00:02:59.097009 | centos-9-stream | MOLECULE_DEBUG: True 2025-11-11 00:02:59.097017 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-11-11 00:02:59.097025 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-11-11 00:02:59.097041 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-11-11 00:02:59.097049 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-11-11 00:02:59.097058 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-11-11 00:02:59.097065 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-11-11 00:02:59.097072 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-11-11 00:02:59.097081 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-11-11 00:02:59.097107 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-11-11 00:02:59.097153 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-11-11 00:02:59.097161 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-11-11 00:02:59.097168 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-11-11 00:02:59.097176 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-11-11 00:02:59.097184 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:59.097192 | centos-9-stream | 2025-11-11 00:02:59.097209 | centos-9-stream | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-11-11 00:02:59.378953 | centos-9-stream | writing pytest debug information to pytestdebug.log 2025-11-11 00:02:59.393500 | centos-9-stream | ============================= test session starts ============================== 2025-11-11 00:02:59.394046 | centos-9-stream | platform linux -- Python 3.11.13, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-11-11 00:02:59.394563 | centos-9-stream | using: pytest-8.4.2 2025-11-11 00:02:59.394990 | centos-9-stream | registered third-party plugins: 2025-11-11 00:02:59.395467 | centos-9-stream | pytest-testinfra-10.2.2 at /home/zuul/venv/lib64/python3.11/site-packages/testinfra/plugin.py 2025-11-11 00:02:59.395905 | centos-9-stream | rootdir: /home/zuul 2025-11-11 00:02:59.396844 | centos-9-stream | plugins: testinfra-10.2.2 2025-11-11 00:02:59.749578 | ubuntu-jammy | collecting ... collected 6 items 2025-11-11 00:02:59.749900 | ubuntu-jammy | 2025-11-11 00:03:00.257634 | ubuntu-noble | collecting ... collected 6 items 2025-11-11 00:03:00.257696 | ubuntu-noble | 2025-11-11 00:03:00.662955 | debian-bookworm | collecting ... collected 6 items 2025-11-11 00:03:00.663676 | debian-bookworm | 2025-11-11 00:03:00.791169 | centos-9-stream | collecting ... collected 6 items 2025-11-11 00:03:00.791469 | centos-9-stream | 2025-11-11 00:03:04.175584 | ubuntu-jammy | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-11-11 00:03:04.213139 | ubuntu-jammy | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-11-11 00:03:04.775287 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-11-11 00:03:04.803797 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-11-11 00:03:06.170151 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-11-11 00:03:06.231218 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-11-11 00:03:07.106453 | ubuntu-jammy | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-11-11 00:03:07.553879 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-11-11 00:03:08.712579 | centos-9-stream | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-11-11 00:03:08.766439 | centos-9-stream | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-11-11 00:03:09.932888 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-11-11 00:03:12.117649 | centos-9-stream | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-11-11 00:03:12.738882 | ubuntu-jammy | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-11-11 00:03:13.073304 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-11-11 00:03:14.462369 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-11-11 00:03:14.521538 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2025-11-11 00:03:14.521567 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-11-11 00:03:14.521573 | ubuntu-noble | 2025-11-11 00:03:14.521579 | ubuntu-noble | ============================== 6 passed in 15.40s ============================== 2025-11-11 00:03:14.119655 | ubuntu-jammy | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-11-11 00:03:14.203679 | ubuntu-jammy | wrote pytest debug information to pytestdebug.log 2025-11-11 00:03:14.203740 | ubuntu-jammy | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-11-11 00:03:14.203753 | ubuntu-jammy | 2025-11-11 00:03:14.203762 | ubuntu-jammy | ============================== 6 passed in 15.40s ============================== 2025-11-11 00:03:14.245222 | ubuntu-jammy | INFO [delegated > verify] Verifier completed successfully. 2025-11-11 00:03:14.245465 | ubuntu-jammy | INFO [delegated > verify] Executed: Successful 2025-11-11 00:03:14.246025 | ubuntu-jammy | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:03:14.554119 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2025-11-11 00:03:14.554292 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2025-11-11 00:03:14.554860 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:03:16.074768 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-11-11 00:03:17.612542 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-11-11 00:03:17.717440 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2025-11-11 00:03:17.718842 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-11-11 00:03:17.718976 | debian-bookworm | 2025-11-11 00:03:17.719173 | debian-bookworm | ============================== 6 passed in 18.49s ============================== 2025-11-11 00:03:17.782793 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2025-11-11 00:03:17.783044 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2025-11-11 00:03:17.783847 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:03:17.999413 | centos-9-stream | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-11-11 00:03:19.859426 | centos-9-stream | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-11-11 00:03:19.952020 | centos-9-stream | wrote pytest debug information to pytestdebug.log 2025-11-11 00:03:19.952469 | centos-9-stream | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-11-11 00:03:19.952708 | centos-9-stream | 2025-11-11 00:03:19.952996 | centos-9-stream | ============================== 6 passed in 20.50s ============================== 2025-11-11 00:03:19.998265 | centos-9-stream | INFO [delegated > verify] Verifier completed successfully. 2025-11-11 00:03:19.998493 | centos-9-stream | INFO [delegated > verify] Executed: Successful 2025-11-11 00:03:19.998937 | centos-9-stream | INFO Molecule executed 1 scenario (1 successful) 2025-11-11 00:03:20.103057 | ubuntu-jammy | ok: Runtime: 0:00:18.010675 2025-11-11 00:03:20.116450 | ubuntu-noble | ok: Runtime: 0:00:18.262288 2025-11-11 00:03:20.126608 | debian-bookworm | ok: Runtime: 0:00:21.614384 2025-11-11 00:03:20.147403 | centos-9-stream | ok: Runtime: 0:00:23.738152 2025-11-11 00:03:20.161897 | 2025-11-11 00:03:20.162082 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2025-11-11 00:03:20.757002 | centos-9-stream | skipping: Conditional result was False 2025-11-11 00:03:20.758490 | debian-bookworm | skipping: Conditional result was False 2025-11-11 00:03:20.759284 | ubuntu-noble | skipping: Conditional result was False 2025-11-11 00:03:20.759895 | ubuntu-jammy | skipping: Conditional result was False 2025-11-11 00:03:20.791477 | 2025-11-11 00:03:20.791556 | PLAY RECAP 2025-11-11 00:03:20.791611 | centos-9-stream | ok: 9 changed: 8 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2025-11-11 00:03:20.791644 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-11-11 00:03:20.791671 | ubuntu-jammy | ok: 13 changed: 10 unreachable: 0 failed: 0 skipped: 9 rescued: 0 ignored: 0 2025-11-11 00:03:20.791697 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-11-11 00:03:20.791716 | 2025-11-11 00:03:20.916410 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2025-11-11 00:03:20.919053 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-11-11 00:03:21.566888 | 2025-11-11 00:03:21.567004 | PLAY [Base post] 2025-11-11 00:03:21.578105 | 2025-11-11 00:03:21.578208 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2025-11-11 00:03:22.313551 | ubuntu-jammy | changed 2025-11-11 00:03:22.346079 | ubuntu-noble | changed 2025-11-11 00:03:22.416525 | centos-9-stream | changed 2025-11-11 00:03:22.445057 | debian-bookworm | changed 2025-11-11 00:03:22.464455 | 2025-11-11 00:03:22.464523 | PLAY RECAP 2025-11-11 00:03:22.464574 | centos-9-stream | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-11-11 00:03:22.464609 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-11-11 00:03:22.464638 | ubuntu-jammy | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-11-11 00:03:22.464665 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-11-11 00:03:22.464684 | 2025-11-11 00:03:22.546501 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-11-11 00:03:22.551300 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2025-11-11 00:03:23.250360 | 2025-11-11 00:03:23.250479 | PLAY [Base post-logs] 2025-11-11 00:03:23.260147 | 2025-11-11 00:03:23.260247 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2025-11-11 00:03:23.655996 | localhost | changed 2025-11-11 00:03:23.672616 | 2025-11-11 00:03:23.672810 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2025-11-11 00:03:23.710590 | localhost | ok 2025-11-11 00:03:23.717188 | 2025-11-11 00:03:23.717339 | TASK [Set zuul-log-path fact] 2025-11-11 00:03:23.745603 | localhost | ok 2025-11-11 00:03:23.758900 | 2025-11-11 00:03:23.759040 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-11-11 00:03:23.784550 | localhost | ok 2025-11-11 00:03:23.788486 | 2025-11-11 00:03:23.788597 | TASK [upload-logs : Create log directories] 2025-11-11 00:03:24.248357 | localhost | changed 2025-11-11 00:03:24.256942 | 2025-11-11 00:03:24.257113 | TASK [upload-logs : Ensure logs are readable before uploading] 2025-11-11 00:03:24.707810 | localhost -> localhost | ok: Runtime: 0:00:00.007077 2025-11-11 00:03:24.711335 | 2025-11-11 00:03:24.711427 | TASK [upload-logs : Upload logs to log server] 2025-11-11 00:03:25.234583 | localhost | Output suppressed because no_log was given 2025-11-11 00:03:25.238885 | 2025-11-11 00:03:25.239099 | LOOP [upload-logs : Compress console log and json output] 2025-11-11 00:03:25.300597 | localhost | skipping: Conditional result was False 2025-11-11 00:03:25.307254 | localhost | skipping: Conditional result was False 2025-11-11 00:03:25.322495 | 2025-11-11 00:03:25.322723 | LOOP [upload-logs : Upload compressed console log and json output] 2025-11-11 00:03:25.381131 | localhost | skipping: Conditional result was False 2025-11-11 00:03:25.381363 | 2025-11-11 00:03:25.386058 | localhost | skipping: Conditional result was False 2025-11-11 00:03:25.395614 | 2025-11-11 00:03:25.395879 | LOOP [upload-logs : Upload console log and json output]